CVE-2025-7072: Hardcoded credentials in KAON CG3000T/CG3000CT routers
The firmware in KAON CG3000TC and CG3000T routers contains hard-coded credentials in clear text (shared across all routers of this model) that an unauthenticated remote attacker could use to execute commands with root privileges. This vulnerability has been fixed in firmware version: 1.00.67 for CG3000TC and 1.00.27 for CG3000T.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7072?
CVE-2025-7072 is considered a high severity vulnerability due to the presence of hard-coded credentials in clear text.
How do I fix CVE-2025-7072?
To fix CVE-2025-7072, update the firmware of affected KAON CG3000TC and CG3000T routers to the latest version that has removed the hard-coded credentials.
What devices are affected by CVE-2025-7072?
CVE-2025-7072 affects the KAON CG3000TC and CG3000T routers with specific firmware versions.
Can CVE-2025-7072 be exploited remotely?
Yes, CVE-2025-7072 can be exploited remotely by unauthenticated attackers who use the hard-coded credentials to gain root access.
What are the implications of CVE-2025-7072?
The implications of CVE-2025-7072 include potential unauthorized access to the router and the ability to execute commands with elevated privileges, compromising network security.