Read the docs
TI-2025-32314 Aliases CVE-2025-51381GHSA-g74p-x9cp-q6j2

Authentication bypass in KAON KCM3100

Priority MEDIUM 49CWE-288Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-288.

Summary

An authentication bypass vulnerability exists in KCM3100 Ver1.4.2 and earlier. If this vulnerability is exploited, an attacker may bypass the authentication of the product from within the LAN to which the product is connected.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0069 53rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
KAONKCM3100Ver1.4.2 and earlier—No fix listedCNA
  • KCM3100 VendorKAON Affected Ver1.4.2 and earlier Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-51381
  2. 2026-10-03 Alias added: GHSA-g74p-x9cp-q6j2

References

Other 2

  • TI-2024-08063 Kaon CG3000 dhcpcd Command cross site scripting CVSS 4.0MEDIUM 5.1
  • TI-2025-06434 Hardcoded credentials in KAON CG3000T/CG3000CT routers CVSS 4.0CRITICAL 9.3
  • TI-2025-39228 Authenticated RCE in KAON PG5298 CVSS 4.0HIGH 8.5
  • TI-2026-37866 Missing authentication for backup functionality in Kaon AR2140X CVSS 4.0HIGH 7.1
  • TI-2026-05280 Missing Authentication for Critical Function in KAON PG5298 CVSS 4.0HIGH 7.1
  • TI-2026-37867 Improper Authentication in Kaon AR2140X CVSS 4.0MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences