CVE-2025-56008:

Cross-site scripting vulnerability in KeeneticOS allows nearby attackers to take over devices.

Score
A numerical rating that indicates how dangerous this vulnerability is.

6.1Medium

Published Date:Oct 23, 2025
CISA KEV Date:*No Data*
Industries Affected:20

Threat Predictions

EPSS Score:0.1
EPSS Percentile:17%

Exploitability

Score:2.8
Attack Vector:NETWORK
Attack Complexity:LOW
Privileges Required:NONE
User Interaction:REQUIRED
Scope:CHANGED

Impact

Score:2.7
Confidentiality Impact:LOW
Integrity Impact:LOW
Availability Impact:NONE

Description Preview

Cross-site scripting vulnerability in KeeneticOS allows nearby attackers to take over devices.

Overview

The vulnerability (CVE-2025-56008) in KeeneticOS is classified as a cross-site scripting (XSS) issue, which is a common web security flaw categorized as CWE-79. The CVSS v3.1 score for this vulnerability is 6.1, indicating a medium severity level. The attack vector is network-based, with low attack complexity and no privileges required. However, user interaction is necessary for exploitation. The scope of the vulnerability is changed, meaning it can affect resources beyond its original security context. While the confidentiality and integrity impacts are low, there is no direct impact on availability. The vulnerability allows attackers near the router to inject malicious scripts, potentially leading to unauthorized access and control over the device.

Remediation

To address this vulnerability, users and administrators of KeeneticOS should take the following steps:
1. Update KeeneticOS to version 4.3 or later as soon as possible.
2. Regularly check for and apply security updates from Keenetic.
3. Implement network segmentation to limit potential attacker access to the router's management interface.
4. Enable and configure any available security features on the router, such as firewall rules or access control lists.
5. Monitor router logs for suspicious activities, especially those related to user creation or permission changes.
6. Educate users about the risks of connecting to unfamiliar wireless networks and the importance of promptly applying security updates.