Information Disclosure in KAON PG5298A and PG5298B Routers

Executive Summary

This vulnerability allows an unauthenticated user to query a specific endpoint in KAON PG5298A and PG5298B routers to retrieve sensitive information, including the administrative portal password.

Useful 0 Not Useful 0

Detection Guidance

Check router firmware versions for PG5298A (must be 3.0.82 or higher) and PG5298B (must be 4.0.82 or higher). Test by querying the vulnerable endpoint to see if sensitive information is exposed.

Useful 0 Not Useful 0

Impact Analysis

An attacker could gain access to the router's administrative portal, allowing them to modify settings, intercept network traffic, or launch further attacks on connected devices.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, potentially violating GDPR (data protection) and HIPAA (health information privacy) requirements if the router handles such data.

Useful 0 Not Useful 0

Mitigation Strategies

Update firmware to version 3.0.82 for PG5298A or 4.0.82 for PG5298B. Restrict network access to the router's administrative interface to prevent unauthenticated queries.

Useful 0 Not Useful 0