CVE-2025-56008

MEDIUM

KeeneticOS < 4.3 - Cross-Site Scripting in Wireless ISP Page

Title source: llm
STIX 2.1

Description

Cross site scripting (XSS) vulnerability in KeeneticOS before 4.3 at "Wireless ISP" page allows attackers located near to the router to takeover the device via adding additional users with full permissions.

References (3)

Core 3

Scores

CVSS v3 6.1
EPSS 0.0022
EPSS Percentile 12.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-79
Status published
Products (1)
keenetic/keeneticos < 4.3
Published Oct 23, 2025
Tracked Since Feb 18, 2026