Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-52748

Missing authentication for backup functionality in Kaon AR2140X

The Kaon AR2140X router contains a vulnerability where the backup functionality is accessible without authentication. This allows an unauthenticated remote attacker to trigger a configuration backup and retrieve it in a form encrypted by a device-specific key. Triggering this function renders the router inoperable for a substantial period of time.  This issue was identified in firmware versions up to 4.2.17. Status of newer versions remains unknown.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Kaon Kaongroup
Products
Ar2140 Ar2140
CVE-2024-3659

Command injection in KAON AR2140 routers

Firmware in KAON AR2140 routers, prior to versions 3.2.50 and 4.2.16, is vulnerable to a shell command injection via sending a crafted request to one of the endpoints. In order to exploit this vulnerability, one has to have access to the administrative portal of the router.

CVSS 4.0 · 10 Critical EPSS 1.6% KEV · Not listed
Vendors
Kaongroup Kaonmedia
Products
Ar2140 Ar2140 Firmware Ar2140 Firmware