KAON vulnerabilities
We track 5 vulnerabilities in KAON products across 6 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on September 28, 2026.
Latest KAON vulnerabilities
- 7.1 High severity
AR2140: Missing Authentication for Critical Functionality
The Kaon AR2140X router contains a vulnerability where the backup functionality is accessible without authentication. This allows an unauthenticated remote attacker to trigger a configuration backup and retrieve it in a form encrypted by a device-specific key.
- 7.1 High severity
PG5298A: Missing Authentication for Critical Functionality
Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the administrative portal. This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A
- 8.5 High severity
PG5298A: Incorrect Authorization
Firmware in KAON PG5298A and PG5298B routers allow an authenticated user to send crafted JSON-RPC requests and perform operations not possible via GUI, e.g. system file read or command execution. This vulnerability has been fixed in firmware version: 3.0.82 fo
- 9.3 Critical severity
CG3000T: Use of Hard-coded Credentials
The firmware in KAON CG3000TC and CG3000T routers contains hard-coded credentials in clear text (shared across all routers of this model) that an unauthenticated remote attacker could use to execute commands with root privileges. This vulnerability has been fi
- 9.3 Critical severity
KCM3100: Authentication Bypass Using an Alternate Path or Channel
An authentication bypass vulnerability exists in KCM3100 Ver1.4.2 and earlier. If this vulnerability is exploited, an attacker may bypass the authentication of the product from within the LAN to which the product is connected.