A critical authentication bypass vulnerability in KuWFi routers exposes the TELNET service to the WAN, potentially allowing complete remote device takeover.

This vulnerability consists of a missing authentication mechanism for the TELNET service, which is active by default and reachable from the public-facing WAN interface. This allows an unauthenticated attacker to establish a remote session with the device.

The exposure of administrative services like TELNET on the WAN interface creates a severe risk of unauthorized remote command execution. With a CVSS score of 9.8, this flaw enables full device compromise, potentially leading to network pivoting, traffic interception, or the permanent bricking of the industrial router.

Immediate Action: Since no specific firmware patch is currently identified, immediately disable the TELNET service via the administrative web interface and restrict all remote management access to trusted local networks only.

Proactive Monitoring: Monitor firewall logs for inbound traffic on TCP port 23 and review system access logs for unauthorized login attempts or unexpected session originations.

Compensating Controls: Implement a strict firewall policy to block all unsolicited inbound traffic on port 23 from the WAN interface, effectively isolating the device from the public internet.

Public Exploit Available: Unknown

Given the critical severity of this vulnerability, immediate network-level mitigation is required. Administrators should treat the TELNET service as insecure and ensure it is not reachable from the public internet to prevent trivial remote exploitation.