CRLF-injection in KeeneticOS before 4.3 at "/auth" API endpoint allows attackers to take over the device via adding additional users with full permissions by managing the victim to open page with exploit.
References
Configurations
No configuration.
History
23 Oct 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-93 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
23 Oct 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-23 15:15
Updated : 2025-10-23 17:15
NVD link : CVE-2025-56007
Mitre link : CVE-2025-56007
CVE.ORG link : CVE-2025-56007
JSON object : View
Products Affected
No product.
CWE
CWE-93
Improper Neutralization of CRLF Sequences ('CRLF Injection')