The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version WDR28081123OV1.01 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| WODESYS | WD-R608U | unknown |
|
||||||
| WODESYS | WDR28 | unknown |
|
||||||
| WODESYS | WDR122B V2.0 | unknown |
|
No data.
No data.
No data available yet.
No remediation available yet.
Tracking
Sign in to view the affected projects.
No advisories yet.
Thu, 18 Dec 2025 19:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Thu, 18 Dec 2025 15:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In WODESYS WD-R608U router (also known as WDR122B V2.0 and WDR28) an unauthorised user can view configuration files by directly referencing the resource in question. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version WDR28081123OV1.01 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable. | |
| Title | Unauthorized Access to files in WODESYS WD-R608U router | |
| Weaknesses | CWE-425 | |
| References |
| |
| Metrics |
cvssV4_0
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: CERT-PL
Published:
Updated: 2025-12-18T18:51:50.142Z
Reserved: 2025-11-13T09:42:15.302Z
Link: CVE-2025-65011
Vulnrichment
Updated: 2025-12-18T15:18:21.394Z
NVD
Status : Awaiting Analysis
Published: 2025-12-18T15:16:01.713
Modified: 2025-12-19T18:00:54.283
Link: CVE-2025-65011
Redhat
No data.
OpenCVE Enrichment
No data.