CVE-2025-51381 | THREATINT

Description

An authentication bypass vulnerability exists in KCM3100 Ver1.4.2 and earlier. If this vulnerability is exploited, an attacker may bypass the authentication of the product from within the LAN to which the product is connected.

Reserved 2025-06-16 | Published 2025-06-18 | Updated 2025-06-18 | Assigner jpcert

CRITICAL: 9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CRITICAL: 9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Problem types

Authentication Bypass Using an Alternate Path or Channel

Product status

Ver1.4.2 and earlier

affected

References

notices.jcom.co.jp/notice/93847.html

jvn.jp/en/jp/JVN46288336/

cve.org (CVE-2025-51381)

nvd.nist.gov (CVE-2025-51381)

Download JSON