PT-2026-80800 · Kaon · Pg5298B+1
CVSS v4.0
8.5
High
| Vector | AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
KAON PG5298A versions prior to 3.0.82
KAON PG5298B versions prior to 4.0.82
Description
Authenticated users can send crafted JSON-RPC requests to perform unauthorized operations that are not available through the graphical user interface, such as executing system commands or reading system files.
Recommendations
Update KAON PG5298A to version 3.0.82.
Update KAON PG5298B to version 4.0.82.
Fix
Incorrect Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Pg5298A
Pg5298B