Description
A vulnerability was found in Keenetic KN-1010, KN-1410, KN-1711, KN-1810 and KN-1910 up to 4.1.2.15. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /version.js of the component Version Data Handler. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-261674 is the identifier assigned to this vulnerability. NOTE: The vendor is aware of this issue and plans to fix it by the end of 2024.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Keenetic | KN-1010 | 1.6.49, 3.5.68, 3.7.77, 4.0.2.215, 4.1.2.14, 4.1.2.15 | — |
| Keenetic | KN-1410 | 1.6.49, 3.5.68, 3.7.77, 4.0.2.215, 4.1.2.14, 4.1.2.15 | — |
| Keenetic | KN-1711 | 1.6.49, 3.5.68, 3.7.77, 4.0.2.215, 4.1.2.14, 4.1.2.15 | — |
| Keenetic | KN-1810 | 1.6.49, 3.5.68, 3.7.77, 4.0.2.215, 4.1.2.14, 4.1.2.15 | — |
| Keenetic | KN-1910 | 1.6.49, 3.5.68, 3.7.77, 4.0.2.215, 4.1.2.14, 4.1.2.15 | — |
References
- VDB-261674 | Keenetic KN-1010/KN-1410/KN-1711/KN-1810/KN-1910 Version Data version.js information disclosure vdb-entry
- VDB-261674 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #316276 | Keenetic Omni Router, Carrier Router, Viva Router, Ultra Router, Ultra II Router, Giga Router * 4.1.2.15/4.1.2.14/4.0.2.215/3.7.77/3.5.68/1.6.49 Information Disclosure third-party-advisory
- https://netsecfish.notion.site/Information-Disclosure-in-Keenetic-Router-d4a12a499cef4acf80e191bdaf20c151?pvs=4 exploit