MEDIUM🇵🇱 Wersja polska

CVE-2024-40112

CVSS 5.9v3.1pub. 2025-06-02upd. 2025-06-25

A Local File Inclusion (LFI) vulnerability exists in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before, which allows an attacker to manipulate the "language" cookie to include arbitrary files from the server. This vulnerability can be exploited to disclose sensitive information.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

  • Sitecom Wlx 2006

    HW
    Sitecom
    all versions

  • Sitecom Wlx 2006 Firmware

    OS
    Sitecom
    ≤ 1.5
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2024-40113MEDIUM6.5same product

Sitecom WLX-2006 Wall Mount Range Extender N300 v.1.5 and before is vulnerable to Use of Default Credentials.

CVE-2024-40114MEDIUM6.1same product

A Cross Site Scripting (XSS) vulnerability in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before ...

CVE-2011-4501HIGH10.0same vendor

The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg...

CVE-2011-4502HIGH10.0same vendor

The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg...

CVE-2011-4503HIGH7.5same vendor

The UPnP IGD implementation in Broadcom Linux on the Sitecom WL-111 allows remote attackers to establish arbit...