Read the docs

KAON

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

KAON records in CISA KEV

No KAON vulnerabilities are listed in CISA KEV.

Records

7 records

TI-2024-08063 CVE-2024-8693 · GHSA-qrjx-rm44-85vw

Kaon CG3000 dhcpcd Command cross site scripting

Priority MEDIUM 56

A vulnerability, which was classified as problematic, has been found in Kaon CG3000 1.01.43.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00348 Published 2024-09-11 No fix listed CWE-79
TI-2025-32314 CVE-2025-51381 · GHSA-g74p-x9cp-q6j2

Authentication bypass in KAON KCM3100

Priority MEDIUM 49

An authentication bypass vulnerability exists in KCM3100 Ver1.4.2 and earlier.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0069 Published 2025-06-18 No fix listed CWE-288
TI-2025-06434 CVE-2025-7072 · GHSA-c223-65f8-3p5p

Hardcoded credentials in KAON CG3000T/CG3000CT routers

Priority MEDIUM 49

The firmware in KAON CG3000TC and CG3000T routers contains hard-coded credentials in clear text (shared across all routers of this model) that an unauthenticated remote attacker could use to execute commands with root pr…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00551 Published 2026-01-09 Fixed in 1.00.27, 1.00.67 CWE-798
TI-2025-39228 CVE-2025-63080 · GHSA-qr3p-6238-2p49

Authenticated RCE in KAON PG5298

Priority LOW 39

Firmware in KAON PG5298A and PG5298B routers allow an authenticated user to send crafted JSON-RPC requests and perform operations not possible via GUI, e.g.

CVSS 4.0HIGH 8.5 Adjacent network High privileges No interaction EPSS 0.00285 Published 2026-08-24 Fixed in 3.0.82, 4.0.82 CWE-863
TI-2026-05280 CVE-2026-6017 · GHSA-4v96-chmw-8jc6

Missing Authentication for Critical Function in KAON PG5298

Priority LOW 31

Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the administrative portal.

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00236 Published 2026-08-24 Fixed in 3.0.82, 4.0.82 CWE-306
TI-2026-37867 CVE-2026-52749 · GHSA-rmcq-5353-m59x

Improper Authentication in Kaon AR2140X

Priority LOW 30

The Kaon AR2140X router improperly issues session cookies in responses to unauthenticated HTTP requests.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00262 Published 2026-09-28 No fix listed CWE-287
Open these records in search →