KAYSUS KS-WR1200 routers with firmware 107 expose SSH and TELNET services on the LAN interface with hardcoded root credentials (root:12345678). The administrator cannot disable these services or change the hardcoded password. (Changing the management GUI password does not affect SSH/TELNET authentication.) Any LAN-adjacent attacker can trivially log in with root privileges.
CVE-2025-68718
CVSS base score
5.4 (v3.1)
Severity
MEDIUM
Attack vector
Adjacent_network
Weakness
CWE-200
Last modified
November 4, 2026
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected products
kaysus ks-wr1200 firmware
References
- github.com Third Party Advisory
- github.com Exploit
- www.kaysus.com Product