CVE-2025-51381CWE-288

An authentication bypass vulnerability exists in KCM3100 Ver1.4.2 and earlier

Critical · published June 18, 2025

CVSS v4.0
9.3
EPSS
1%
Percentile
52.2
In the wild
Unconfirmed
What it is

🔥 An authentication bypass vulnerability in KCM3100 Ver1.4.2 and earlier could let attackers waltz right past your security from within the same network! ⚠️ Think of it like a party where your bouncer is asleep at the door; anyone can just stroll in without checking their invitation. This vulnerability lets attackers bypass your security guard, allowing them to access sensitive features without verifications! If exploited, this could lead to unauthorized access to sensitive data or system configurations—an absolute disaster waiting to happen! Imagine an intruder reprogramming your device and wreaking havoc; this situation could severely compromise your network's integrity and confidentiality.

Put simply

Think of it like a party where your bouncer is asleep at the door; anyone can just stroll in without checking their invitation. This vulnerability lets attackers bypass your security guard, allowing them to access sensitive features without verifications! This authentication bypass vulnerability affects KCM3100 devices, allowing attackers on the same local area network (LAN) to access the system without proper authentication checks, making it trivial to exploit.

What to do

If exploited, this could lead to unauthorized access to sensitive data or system configurations—an absolute disaster waiting to happen! Imagine an intruder reprogramming your device and wreaking havoc; this situation could severely compromise your network's integrity and confidentiality. To protect yourself, immediately upgrade to version 1.4.3 or later, which resolves this vulnerability. Also, ensure that network access controls are in place to limit exposure to potentially malicious users on your LAN. You've got this! By taking these steps, you’ll be one step closer to locking things down tight! 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00690 · 52.2th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2025-06-18T04:27Z
EPSS history
Timeline
  • 18 JUN 04:27Z
    An authentication bypass vulnerability exists in KCM3100 Ver1.4.2 and earlier
    cvelistv5