CVE-2025-65011: Unauthorized Access to files in WODESYS WD-R608U router
In WODESYS WD-R608U router (also known as WDR122B V2.0 and WDR28) an unauthorised user can view configuration files by directly referencing the resource in question.
The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version WDR28081123OV1.01 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-65011?
CVE-2025-65011 is classified as a high-severity vulnerability due to the potential unauthorized access to sensitive configuration files.
How do I fix CVE-2025-65011?
To mitigate CVE-2025-65011, update the firmware of the WODESYS WD-R608U router to the latest version provided by the vendor.
Who is affected by CVE-2025-65011?
CVE-2025-65011 affects users of the WODESYS WD-R608U router and its variants, including WDR122B V2.0 and WDR28.
What kind of attack does CVE-2025-65011 enable?
CVE-2025-65011 enables an unauthorized user to view sensitive configuration files, potentially leading to further exploitation.
Is there a workaround for CVE-2025-65011?
While waiting for a firmware update, securing router access with strong passwords and restricting network access can help mitigate risks associated with CVE-2025-65011.