KAYSUS KS-WR1200 Hardcoded Credential Vulnerability in SSH and TELNET Services

A vulnerability exists in KAYSUS KS-WR1200 routers running firmware 107, where SSH and TELNET services are exposed on the LAN interface with hardcoded root credentials. The default credentials are root:12345678. Users cannot disable these services or change the password, as the management GUI password does not affect SSH or TELNET authentication. This flaw allows any attacker on the LAN to log in with root privileges.

Impact

Exploitation of this vulnerability allows for unauthorized access to the router with root privileges, enabling potential modification of router settings or interception of network traffic.