CVEvulnerability

CVE-2025-56008

6.1 MEDIUM Published 2025-10-23 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2025-10-23
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses: CWE-79

Description

Cross site scripting (XSS) vulnerability in KeeneticOS before 4.3 at "Wireless ISP" page allows attackers located near to the router to takeover the device via adding additional users with full permissions.

Affected configurations

• keenetic keeneticos (< 4.3)

Weakness · CWE (1)

CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References

https://github.com/notdenied/writeups/blob/main/CVE/CVE-2025-56008.md github.com
https://keenetic.com/ Product
https://keenetic.com/global/security#october-2025-web-api-vulnerabilities Vendor Advisory

CVE-2025-56008

Description

Affected configurations

Related

Weakness · CWE (1)

References