CVE-2025-56565

{
  "id": "CVE-2025-56565",
  "sourceIdentifier": "[email protected]",
  "published": "2026-09-16T21:17:06.657",
  "lastModified": "2026-11-04T20:10:00.263",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory. The exposed material includes SSH private keys, dynamic DNS passwords, email notification credentials and administrative passwords. An attacker with physical access to the device can extract these credentials from an SPI flash dump, leading to device compromise, infiltration of the connected network and unauthorised access to dependent third-party services."
    },
    {
      "lang": "es",
      "value": "El firmware DD-WRT, tal como se implementa en el hardware TP-Link TL-WR740N v1 a v4, almacena credenciales de autenticación sensibles en texto claro en la memoria no volátil. El material expuesto incluye claves privadas SSH, contraseñas de DNS dinámico, credenciales de notificación por correo electrónico y contraseñas administrativas. Un atacante con acceso físico al dispositivo puede extraer estas credenciales de un volcado de flash SPI, lo que lleva al compromiso del dispositivo, la infiltración de la red conectada y el acceso no autorizado a servicios de terceros dependientes."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "version": "n/a",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
          "baseScore": 7.6,
          "baseSeverity": "HIGH",
          "attackVector": "PHYSICAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "CHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 0.9,
        "impactScore": 6.0
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-09-22T16:05:07.746884Z",
          "id": "CVE-2025-56565",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-312"
        },
        {
          "lang": "en",
          "value": "CWE-316"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/RIFTI-Offensive-Security/security-advisories/blob/main/CVE-2025-56565.md",
      "source": "[email protected]"
    },
    {
      "url": "https://wiki.dd-wrt.com/wiki/index.php/TP-LINK_TL-WR740N",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/RIFTI-Offensive-Security/security-advisories/blob/main/CVE-2025-56565.md",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ]
}