A Local File Inclusion (LFI) vulnerability exists in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before, which allows an attacker to manipulate the "language" cookie to include arbitrary files from the server. This vulnerability can be exploited to disclose sensitive information.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| http://www.sitecomlearningcentre.com/products/wlx-2006v1001/wi-fi-range-extender-n300/downloads | Broken Link |
| https://github.com/Emm448/vulnerability-research/tree/main/CVE-2024-40112 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
25 Jun 2025, 19:29
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/Emm448/vulnerability-research/tree/main/CVE-2024-40112 - Exploit, Third Party Advisory | |
| References | () http://www.sitecomlearningcentre.com/products/wlx-2006v1001/wi-fi-range-extender-n300/downloads - Broken Link | |
| CPE | cpe:2.3:h:sitecom:wlx-2006:-:*:*:*:*:*:*:* cpe:2.3:o:sitecom:wlx-2006_firmware:*:*:*:*:*:*:*:* |
|
| First Time |
Sitecom wlx-2006
Sitecom Sitecom wlx-2006 Firmware |
02 Jun 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-06-02 16:15
Updated : 2025-06-25 19:29
NVD link : CVE-2024-40112
Mitre link : CVE-2024-40112
JSON object : View
Products Affected
sitecom
- wlx-2006_firmware
- wlx-2006
CWE
No CWE.