Oskar Rudziński

**Name of the Vulnerable Software and Affected Versions** KAON PG5298A versions prior to 3.0.82 KAON PG5298B versions prior to 4.0.82 **Description** Authenticated users can send crafted JSON-RPC requests to perform unauthorized operations that are not available through the graphical user interface, such as executing system commands or reading system files. **Recommendations** Update KAON PG5298A to version 3.0.82. Update KAON PG5298B to version 4.0.82.