CVE-2025-2212: Castlenet CBW383G2N RgSwInfo.asp cross site scripting
First published: Tue Mar 11 2025(Updated: )
A vulnerability was found in Castlenet CBW383G2N up to 20250301. It has been classified as problematic. This affects an unknown part of the file /RgSwInfo.asp. The manipulation of the argument Description with the input <img/src/onerror=prompt(8)> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Castlenet CBW383G2N | <=20250301 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-2212?
CVE-2025-2212 is classified as a problematic vulnerability affecting the Castlenet CBW383G2N device.
What type of vulnerability is CVE-2025-2212?
CVE-2025-2212 is a cross-site scripting (XSS) vulnerability found in the manipulation of the Description argument.
How do I fix CVE-2025-2212?
To fix CVE-2025-2212, it is recommended to sanitize user inputs and update to a patched version of the firmware.
Which software versions are affected by CVE-2025-2212?
CVE-2025-2212 affects the Castlenet CBW383G2N up to version 20250301.
What component is impacted by CVE-2025-2212?
CVE-2025-2212 impacts the /RgSwInfo.asp file of the affected device.
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/title
- agent/description
- agent/type
- agent/first-publish-date
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/source
- agent/author
- agent/last-modified-date
- agent/severity
- agent/tags
- agent/event
- vendor/castlenet
- canonical/castlenet cbw383g2n