CVE-2025-7072

Critical

Published: 09/01/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

KAON CG3000TC and CG3000T routers contain hard-coded credentials in clear text, shared across all routers of this model. An unauthenticated remote attacker can use them to execute commands with root privileges. The vulnerability is fixed in firmware versions 1.00.67 (CG3000TC) and 1.00.27 (CG3000T).

Risk Assessment

A remote attacker can gain full control of the router, potentially leading to traffic interception, network configuration modification, or use of the device for further attacks.

Recommendation

Upgrade the router firmware to the specified patched versions immediately. If not possible, restrict remote access to the devices.

Original NVD description (English source)

The firmware in KAON CG3000TC and CG3000T routers contains hard-coded credentials in clear text (shared across all routers of this model) that an unauthenticated remote attacker could use to execute commands with root privileges. This vulnerability has been fixed in firmware version: 1.00.67 for CG3000TC and 1.00.27 for CG3000T.