PT-2025-43521 · Keenetic · Keeneticos

Published 2025-10-01 · Updated 2026-05-20 · CVE-2025-56008

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions KeeneticOS versions prior to 4.3

Description A cross site scripting (XSS) issue exists in KeeneticOS. This flaw, found at the "Wireless ISP" page, could allow an attacker in close proximity to the router to gain control of the device by adding new users with full permissions.

Recommendations Update KeeneticOS to version 4.3 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2025-14512

CVE-2025-56008

Affected Products

Keeneticos

References · 10

• 🔥 https://github.com/notdenied/writeups/blob/main/CVE/CVE-2025-56008.md · Exploit
• https://keenetic.com/global/security#october-2025-web-api-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-56008 · Security Note
• https://osv.dev/vulnerability/CVE-2025-56008 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14512 · Security Note
• https://twitter.com/VulmonFeeds/status/1981420396566974957 · Twitter Post
• https://t.me/cveNotify/141538 · Telegram Post
• https://twitter.com/CVEnew/status/1981373671273853166 · Twitter Post
• https://t.me/cveNotify/164294 · Telegram Post
• https://keenetic.com · Note