CVE-2025-63080
Received Received - Intake

Authenticated Command Execution in KAON PG5298A and PG5298B Routers

Publication date: 2026-08-24

Last updated on: 2026-08-24

Assigner: CERT.PL

Description
Firmware in KAON PG5298A and PG5298B routers allow an authenticated user to send crafted JSON-RPC requests and perform operations not possible via GUI, e.g. system file read or command execution.    This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-24
Last Modified
2026-08-24
Generated
2026-08-24
AI Q&A
2026-08-24
EPSS Evaluated
N/A
NVD
CVE-2025-63080
EUVD
EUVD-2025-210761

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
kaon pg5298a to 3.0.82 (inc)
kaon pg5298b to 4.0.82 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2025-63080 is an Incorrect Authorization vulnerability in KAON PG5298A and PG5298B routers. Authenticated users can send crafted JSON-RPC requests to perform unauthorized operations such as reading system files or executing commands, which are not possible via the GUI.

Detection Guidance

Detecting this vulnerability requires checking the firmware version of KAON PG5298A or PG5298B routers. If the firmware version is below 3.0.82 for PG5298A or 4.0.82 for PG5298B, the system is vulnerable. Logs should be reviewed for unusual JSON-RPC requests from authenticated users.

Impact Analysis

This vulnerability allows authenticated attackers to read sensitive system files or execute arbitrary commands on the router, potentially leading to full system compromise, data theft, or further network infiltration.

Compliance Impact

This vulnerability allows authenticated users to read system files or execute commands, which could lead to unauthorized access to sensitive data. This may violate compliance requirements under GDPR (data protection) and HIPAA (healthcare data privacy) by enabling data breaches or unauthorized modifications.

Mitigation Strategies

Immediately update the firmware to version 3.0.82 for PG5298A or 4.0.82 for PG5298B. Restrict authenticated user access to only necessary operations and monitor network traffic for suspicious JSON-RPC requests.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-63080. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart