CVE-2025-56008

medium

Description

Cross site scripting (XSS) vulnerability in KeeneticOS before 4.3 at "Wireless ISP" page allows attackers located near to the router to takeover the device via adding additional users with full permissions.

References

https://keenetic.com/global/security#october-2025-web-api-vulnerabilities

https://keenetic.com/

https://github.com/notdenied/writeups/blob/main/CVE/CVE-2025-56008.md

Details

Source: Mitre, NVD

Published: 2025-10-23

Updated: 2026-05-20

Risk Information

CVSS v2

Base Score: 6.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N