Kenwood DNR1007XR devices are vulnerable to a code execution flaw that requires no authentication and is limited to attackers who have physical presence. The flaw resides in the firmware update mechanism; by creating a symbolic link, an attacker can manipulate the update service to write data to an arbitrary location. If successfully exploited, the attacker can launch code with root privileges, potentially compromising the entire device and any related infrastructure.

Kenwood DNR1007XR routers and related equipment running the affected firmware. No specific firmware version numbers are listed, so all installations of Kenwood DNR1007XR are considered vulnerable until a vendor‑supplied fix is available.

The CVSS score of 6.8 indicates moderate severity, and the lack of an EPSS rating means the exploitation probability is unknown. The vulnerability is not listed in the CISA KEV catalog, suggesting no publicly known exploits yet. However, because exploitation requires only physical access and no authentication, the risk for environments where attackers can reach the device is high, especially if the firmware update functionality is kept enabled.