KAYSUS KS-WR3600 SSH Access Vulnerability Allowing Root Command Execution

A vulnerability exists in KAYSUS KS-WR3600 routers running firmware 1.0.5.9.1, where the SSH service is enabled by default on the LAN interface. The root account has no password, and there are no options to disable SSH or require authentication through the command line interface or web graphical user interface. This configuration allows any attacker on the local network to easily gain root access and execute arbitrary commands with full privileges.

Impact

Exploitation of this vulnerability provides unauthorized root access, allowing execution of arbitrary commands with full privileges on the affected router.