CVE-2026-52748
2026-09-28
13h17 +00:00
13h17 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
The Kaon AR2140X router contains a vulnerability where the backup functionality is accessible without authentication. This allows an unauthenticated remote attacker to trigger a configuration backup and retrieve it in a form encrypted by a device-specific key. Triggering this function renders the router inoperable for a substantial period of time.
This issue was identified in firmware versions up to 4.2.17. Status of newer versions remains unknown.
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Missing Authentication for Critical Functionality The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. |
