BaseFortify

Publication date: 2025-10-23

Last updated on: 2026-05-20

Assigner: MITRE

Description

CRLF-injection in KeeneticOS before 4.3 at "/auth" API endpoint allows attackers to take over the device via adding additional users with full permissions by managing the victim to open page with exploit.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-23

Last Modified

2026-05-20

Generated

2026-07-06

AI Q&A

2025-10-23

EPSS Evaluated

2026-07-05

NVD

CVE-2025-56007

EUVD

EUVD-2025-35693

Affected Vendors & Products

Vendor	Product	Version / Range
keenetic	keeneticos	to 4.3 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-93	The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs.

Attack-Flow Graph

Executive Summary

This vulnerability is a CRLF (Carriage Return Line Feed) injection in the KeeneticOS before version 4.3 at the "/auth" API endpoint. It allows attackers to take over the device by injecting additional users with full permissions. This is done by tricking the victim into opening a specially crafted page containing the exploit.

Impact Analysis

The vulnerability can allow an attacker to gain full control over the affected device by adding users with full permissions. This can lead to unauthorized access, manipulation, or disruption of the device and its network functions.

Hi! I’m here to help you understand CVE-2025-56007. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70