CVE-2026-52748 : 상세 정보

CVE-2026-52748

2026-09-28
13h17 +00:00
Authorization problems
A07-Identif. and Authent. Fail
2026-09-28
16h31 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

The Kaon AR2140X router contains a vulnerability where the backup functionality is accessible without authentication. This allows an unauthenticated remote attacker to trigger a configuration backup and retrieve it in a form encrypted by a device-specific key. Triggering this function renders the router inoperable for a substantial period of time.  This issue was identified in firmware versions up to 4.2.17. Status of newer versions remains unknown.

CVE 정보

관련 약점

CWE-ID 약점 이름 출처
CWE-306 Missing Authentication for Critical Functionality
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

참고 자료