KLR 300N Router Installation Page Exposure Scanner

The KLR 300N Router, manufactured by Keo, is a wireless home router commonly deployed in residential environments to provide high-speed internet access and support multiple connected devices. Its user-friendly interface enables non-technical users to easily set up and manage their home networks. IT teams and home system administrators rely on this device for its affordability and simplicity, but its widespread use makes it a frequent target for attackers seeking to compromise network security.

Installation Page Exposure is a vulnerability where the router's setup or installation wizard remains publicly accessible, often due to default configurations that are not properly secured. This condition arises when the router's web interface fails to restrict access to the initial setup page after the device is configured. Attackers can exploit this by directly navigating to the installation page, bypassing authentication controls and gaining administrative privileges.

Specifically, the vulnerability exists on the /setup or /install endpoint of the KLR 300N Router's web interface. This endpoint is intended for first-time configuration but remains active and unauthenticated even after initial setup. By accessing this page, an attacker can modify critical settings such as Wi-Fi credentials, DNS configurations, and firewall rules without needing a password.

If exploited, an attacker can take full control of the router, redirect traffic to malicious sites, intercept sensitive data, or launch further attacks on connected devices. This can lead to identity theft, financial loss, and a complete compromise of home network security. The CVSS score of 8.0 reflects the high severity and ease of exploitation, making immediate remediation essential.