Wlx 2006 Firmware

3 CVEs product

Monthly

CVE-2024-40114 MEDIUM POC This Month

A Cross Site Scripting (XSS) vulnerability in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before allows an attacker to manipulate the language cookie to inject malicious JavaScript code.

XSS Wlx 2006 Firmware
NVD GitHub
CVSS 3.1
6.1
EPSS
0.1%
CVE-2024-40113 MEDIUM POC This Month

A security vulnerability in Sitecom WLX-2006 Wall Mount Range Extender N300 v.1.5 and before (CVSS 6.5). Risk factors: public PoC available.

Information Disclosure Wlx 2006 Firmware
NVD GitHub
CVSS 3.1
6.5
EPSS
0.1%
CVE-2024-40112 MEDIUM POC This Month

A Local File Inclusion (LFI) vulnerability exists in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before, which allows an attacker to manipulate the "language" cookie to include arbitrary files from the server. This vulnerability can be exploited to disclose sensitive information.

PHP Lfi Information Disclosure Wlx 2006 Firmware
NVD GitHub
CVSS 3.1
5.9
EPSS
0.0%
CVE-2024-40114
EPSS 0% CVSS 6.1
MEDIUM POC This Month

A Cross Site Scripting (XSS) vulnerability in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before allows an attacker to manipulate the language cookie to inject malicious JavaScript code.

XSS Wlx 2006 Firmware
NVD GitHub
CVE-2024-40113
EPSS 0% CVSS 6.5
MEDIUM POC This Month

A security vulnerability in Sitecom WLX-2006 Wall Mount Range Extender N300 v.1.5 and before (CVSS 6.5). Risk factors: public PoC available.

Information Disclosure Wlx 2006 Firmware
NVD GitHub
CVE-2024-40112
EPSS 0% CVSS 5.9
MEDIUM POC This Month

A Local File Inclusion (LFI) vulnerability exists in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before, which allows an attacker to manipulate the "language" cookie to include arbitrary files from the server. This vulnerability can be exploited to disclose sensitive information.

PHP Lfi Information Disclosure +1
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy