KAON KCM3100 Authentication Bypass Vulnerability

An authentication bypass vulnerability has been identified in the KAON KCM3100 gateway, specifically in versions through 1.4.2. This vulnerability allows an attacker to bypass authentication from within the local area network (LAN) to which the device is connected.

Impact

Exploitation of this vulnerability allows for authentication to be bypassed, potentially leading to unauthorized access or actions on the device.

Remediation

Users are advised to update the firmware to the latest version, 1.4.8, which is being rolled out gradually starting June 17, 2025. After the update, the modem should be restarted to apply the new version.