CVE-2024-40112: Medium severity sitecom wlx-2006 wall mount range extender n300 vulnerability
A Local File Inclusion (LFI) vulnerability exists in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before, which allows an attacker to manipulate the "language" cookie to include arbitrary files from the server. This vulnerability can be exploited to disclose sensitive information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-40112?
CVE-2024-40112 is classified as a medium severity Local File Inclusion vulnerability.
How do I fix CVE-2024-40112?
To fix CVE-2024-40112, update your Sitecom WLX-2006 Wall Mount Range Extender N300 to the latest firmware version that addresses this vulnerability.
What can an attacker do with CVE-2024-40112?
An attacker exploiting CVE-2024-40112 can manipulate the 'language' cookie to include arbitrary files from the server, potentially disclosing sensitive information.
Which versions of Sitecom WLX-2006 are affected by CVE-2024-40112?
CVE-2024-40112 affects Sitecom WLX-2006 Wall Mount Range Extender N300 versions up to and including v1.5.
Is CVE-2024-40112 related to any other vulnerabilities?
While CVE-2024-40112 specifically addresses Local File Inclusion, it is essential to review related vulnerabilities in the same product for comprehensive security.