CVE-2025-51381

critical · 9.3

An authentication bypass vulnerability exists in KCM3100 Ver1.4.2 and earlier. If this vulnerability is exploited, an attacker may bypass the authentication of the product from within the LAN to which the product is connected.

9.3

CVSS

0.7%

EPSS (exploit prob.)

52nd

EPSS percentile

2025-06-18

Published

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE-288

References

https://jvn.jp/en/jp/JVN46288336/
https://notices.jcom.co.jp/notice/93847.html

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-51381