CVE-2025-7072
Critical
Description
The firmware in KAON CG3000TC and CG3000T routers contains hard-coded credentials in clear text (shared across all routers of this model) that an unauthenticated remote attacker could use to execute commands with root privileges. This vulnerability has been fixed in firmware version: 1.00.67 for CG3000TC and 1.00.27 for CG3000T.
SeverityCritical
CVSS9.3
Exploit probability—
ProductCG3000T
PublishedJan 9, 2026
First seenJan 9, 2026
Weakness typeCWE-798Hard-coded credentials
How to fix
Update
- KAON CG3000T1.00.27 or later
- KAON CG3000TC1.00.67 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| KAON CG3000T | v < 1.00.27 | 1.00.27 |
| KAON CG3000TC | v < 1.00.67 | 1.00.67 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.