← Back

CVE-2024-40112

nvd nist
Published: Jun 2, 2025Modified: Jun 17, 2026

JSON object

Loading...
5.9
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Exploitability: 2.5 / Impact: 3.4
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A Local File Inclusion (LFI) vulnerability exists in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before, which allows an attacker to manipulate the "language" cookie to include arbitrary files from the server. This vulnerability can be exploited to disclose sensitive information.

Affected (1)

Sitecom
1 product
Wlx 2006 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wlx 2006 Firmware
Up to 1.5
Running on/withPlatform Versions
Sitecom
Wlx 2006
All versions

Related CWEs

CWE-98
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.

References (2)

Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
ExploitThird Party Advisory

Timeline

No history available yet.