Vulnerabilidades do Keenetic Keeneticos

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Keenetic Keeneticos: 3 registro(s), com versões afetadas e correções.
cpe:2.3:o:keenetic:keeneticos

CVE-2025-56009 Média · 5.3 CWE-352 23/10/2025

Cross-Site Request Forgery (CSRF) em Keenetic Keeneticos

Cross site request forgery (CSRF) vulnerability in KeeneticOS before 4.3 at "/rci" API endpoint allows attackers to take over the device via adding additional users with full permissions by managing the victim to open page with exploit.

CVE-2025-56008 Média · 6.1 CWE-79 23/10/2025

Cross-site Scripting (XSS) em Keenetic Keeneticos

Cross site scripting (XSS) vulnerability in KeeneticOS before 4.3 at "Wireless ISP" page allows attackers located near to the router to takeover the device via adding additional users with full permissions.

CVE-2025-56007 Média · 6.5 CWE-93 23/10/2025

CRLF-injection in KeeneticOS before 4.3 at "/auth" API endpoint allows attackers to take…

CRLF-injection in KeeneticOS before 4.3 at "/auth" API endpoint allows attackers to take over the device via adding additional users with full permissions by managing the victim to open page with exploit.