A critical authentication bypass vulnerability in KAYSUS KS-WR3600 routers allows unauthenticated remote attackers to hijack active user sessions and gain unauthorized administrative control.

The device suffers from a session validation flaw where endpoints, such as /cgi-bin/system-tool, fail to verify the authenticity of session tokens. This permits an unauthenticated attacker to inject or manipulate session values to piggyback on an existing user's authenticated state.

Successful exploitation allows an attacker to bypass authentication entirely, leading to the exfiltration of sensitive device configurations and the execution of arbitrary administrative commands. Given the CVSS score of 9.4, this vulnerability represents a severe threat to network integrity, potentially allowing for device compromise, man-in-the-middle attacks, or full takeover of the routing infrastructure.

Immediate Action: Contact the vendor or consult the official KAYSUS support portal immediately to identify and apply the latest firmware security update.

Proactive Monitoring: Monitor network traffic for unusual requests to /cgi-bin/system-tool and inspect device access logs for unauthorized session activity or unexpected configuration changes.

Compensating Controls: If a patch is unavailable, place the management interface on a restricted, non-public VLAN and utilize a firewall to restrict access to administrative endpoints to known, trusted IP addresses.

Public Exploit Available: Unknown

This vulnerability is highly critical due to the lack of authentication requirements for privileged system actions. Administrators must prioritize the application of firmware updates as soon as they are made available by KAYSUS to prevent unauthorized remote access and potential network-wide compromise.