{"id":"CVE-2025-51381","state":"PUBLISHED","title":"An authentication bypass vulnerability exists in KCM3100 Ver1.4.2 and earlier. If this vulnerability is exploited, an attacker may bypass the authentication of the product from wit","description":"An authentication bypass vulnerability exists in KCM3100 Ver1.4.2 and earlier. If this vulnerability is exploited, an attacker may bypass the authentication of the product from within the LAN to which the product is connected.","publishedAt":"2025-06-18T04:27:50.253Z","updatedAt":"2025-06-18T13:56:08.664Z","severity":{"score":9.3,"label":"Critical","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"jpcert"},"assigner":"jpcert","products":["KAON KCM3100"],"affected":[{"vendor":"KAON","product":"KCM3100","versions":[{"version":"Ver1.4.2 and earlier","status":"affected"}]}],"references":["https://notices.jcom.co.jp/notice/93847.html","https://jvn.jp/en/jp/JVN46288336/"],"weaknesses":["CWE-288"],"ingestedAt":"2026-10-29T20:09:31.862Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/51xxx/CVE-2025-51381.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-51381","state":"PUBLISHED","datePublished":"2025-06-18T04:27:50.253Z","dateUpdated":"2025-06-18T13:56:08.664Z","assignerShortName":"jpcert","assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateReserved":"2025-06-16T02:27:11.341Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"An authentication bypass vulnerability exists in KCM3100 Ver1.4.2 and earlier. If this vulnerability is exploited, an attacker may bypass the authentication of the product from within the LAN to which the product is connected."}],"affected":[{"vendor":"KAON","product":"KCM3100","versions":[{"version":"Ver1.4.2 and earlier","status":"affected"}]}],"references":[{"url":"https://notices.jcom.co.jp/notice/93847.html"},{"url":"https://jvn.jp/en/jp/JVN46288336/"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_0":{"version":"3.0","baseSeverity":"CRITICAL","baseScore":9.8,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}},{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV4_0":{"version":"4.0","baseSeverity":"CRITICAL","baseScore":9.3,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-288","description":"Authentication Bypass Using an Alternate Path or Channel","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"jpcert","orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateUpdated":"2025-06-18T04:27:50.253Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-06-18T13:55:41.065412Z","id":"CVE-2025-51381","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-06-18T13:56:08.664Z"}}]}}}