EUVD-2026-64827
GHSA-4v96-chmw-8jc6
Severity by source
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Adjacent-only reachability enforced by AV:A; unauthenticated endpoint (PR:N) discloses credentials with no integrity or availability impact.
Primary rating from Vendor (CERT-PL).
CVSS VectorVendor: CERT-PL
Lifecycle Timeline
3DescriptionCVE.org
Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the administrative portal. This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B.
AnalysisAI
Unauthenticated information disclosure in KAON PG5298A and PG5298B router firmware exposes the administrative portal password to any attacker on the same local network segment. An adjacent-network attacker can query a specific firmware endpoint without credentials and retrieve sensitive authentication material, enabling full device takeover. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to be on the same adjacent network segment as the vulnerable router - such as the same LAN, Wi-Fi SSID, or ISP-shared local segment - consistent with the CVSS 4.0 AV:A metric. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 7.1 with AV:A is the defining constraint on real-world risk: exploitation requires the attacker to already be on the same network segment as the router - the same LAN, Wi-Fi network, or equivalent adjacency. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | The primary remediation is a firmware upgrade: PG5298A devices should be updated to firmware version 3.0.82 or later, and PG5298B devices to firmware version 4.0.82 or later. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all KAON PG5298A and PG5298B routers in your environment and document current firmware versions; restrict adjacent-network access to these devices and disable remote management where operationally feasible. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today