CVE-2025-56007
BaseFortify
Publication date: 2025-10-23
Last updated on: 2025-11-04
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| keenetic | keeneticos | to 4.3 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-93 | The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a CRLF (Carriage Return Line Feed) injection in the KeeneticOS before version 4.3 at the "/auth" API endpoint. It allows attackers to take over the device by injecting additional users with full permissions. This is done by tricking the victim into opening a specially crafted page containing the exploit.
How can this vulnerability impact me? :
The vulnerability can allow an attacker to gain full control over the affected device by adding users with full permissions. This can lead to unauthorized access, manipulation, or disruption of the device and its network functions.