Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: WODESYS Clear all filters
TI-2025-40198 CVE-2025-65011 · GHSA-fwpg-6hcx-x88c

Unauthorized Access to files in WODESYS WD-R608U router

Priority LOW 31

In WODESYS WD-R608U router (also known as WDR122B V2.0 and WDR28) an unauthorised user can view configuration files by directly referencing the resource in question.

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00195 Published 2025-12-18 No fix listed CWE-425
TI-2025-40196 CVE-2025-65009 · GHSA-7q6v-c95j-f4r3

Insecure Password Storage in WODESYS WD-R608U router

Priority LOW 30

In WODESYS WD-R608U router (also known as WDR122B V2.0 and WDR28) admin password is stored in configuration file as plaintext and can be obtained by unauthorized user by direct references to the resource in question.

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00184 Published 2025-12-18 No fix listed CWE-256
TI-2025-40195 CVE-2025-65008 · GHSA-v59c-cfx2-53vc

OS Command Injection in WODESYS WD-R608U router

Priority MEDIUM 47

In WODESYS WD-R608U router (also known as WDR122B V2.0 and WDR28) due to lack of validation in the langGet parameter in the adm.cgi endpoint, the malicious attacker can execute system shell commands.

CVSS 4.0CRITICAL 9.4 Adjacent network No auth No interaction EPSS 0.02695 Published 2025-12-18 No fix listed CWE-78
TI-2025-40194 CVE-2025-65007 · GHSA-v2vr-c36c-45r4

Missing Authentication for Critical Function in WODESYS WD-R608U router

Priority MEDIUM 40

In WODESYS WD-R608U router (also known as WDR122B V2.0 and WDR28) due to lack of authentication in the configuration change module in the adm.cgi endpoint, the unauthenticated attacker can execute commands including back…

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.00341 Published 2025-12-18 No fix listed CWE-306