CVE-2025-65009

CVE-2025-65009 describes a critical vulnerability in the WODESYS WD-R608U router (also known as WDR122B V2.0 and WDR28), where the administrative password is stored in plaintext within the configuration file, allowing unauthorized access via direct resource references. This vulnerability carries a CVSS score of 7.1 (HIGH), indicating that an unauthenticated attacker on the adjacent network can easily exploit it to gain full control over the device, leading to a complete compromise of confidentiality. While only version WDR28081123OV1.01 has been confirmed vulnerable, other versions may also be affected. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.