Vulnerabilidades de Keenetic
CVEs publicadas que afetam produtos de Keenetic: 3 registro(s), com severidade, exploração e correções.
CVE-2025-56009
Média · 5.3
CWE-352 23/10/2025
Cross-Site Request Forgery (CSRF) em Keenetic Keeneticos
Cross site request forgery (CSRF) vulnerability in KeeneticOS before 4.3 at "/rci" API endpoint allows attackers to take over the device via adding additional users with full permissions by managing the victim to open page with exploit.
CVE-2025-56008
Média · 6.1
CWE-79 23/10/2025
Cross-site Scripting (XSS) em Keenetic Keeneticos
Cross site scripting (XSS) vulnerability in KeeneticOS before 4.3 at "Wireless ISP" page allows attackers located near to the router to takeover the device via adding additional users with full permissions.
CVE-2025-56007
Média · 6.5
CWE-93 23/10/2025
CRLF-injection in KeeneticOS before 4.3 at "/auth" API endpoint allows attackers to take…
CRLF-injection in KeeneticOS before 4.3 at "/auth" API endpoint allows attackers to take over the device via adding additional users with full permissions by managing the victim to open page with exploit.