CVE-2025-2213: Castlenet CBW383G2N Wireless Menu wlanPrimaryNetwork.asp cross site scripting
First published: Tue Mar 11 2025(Updated: )
A vulnerability was found in Castlenet CBW383G2N up to 20250301. It has been declared as problematic. This vulnerability affects unknown code of the file /wlanPrimaryNetwork.asp of the component Wireless Menu. The manipulation of the argument SSID with the input <img/src/onerror=prompt(8)> leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Castlenet CBW383G2N | <=20250301 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-2213?
CVE-2025-2213 has been declared as problematic, indicating a potential risk to the affected system.
How do I fix CVE-2025-2213?
To fix CVE-2025-2213, update your Castlenet CBW383G2N device to a version released after 20250301.
What components are affected by CVE-2025-2213?
CVE-2025-2213 affects the Wireless Menu component, specifically the /wlanPrimaryNetwork.asp file.
What type of vulnerability is CVE-2025-2213?
CVE-2025-2213 is a vulnerability that allows manipulation of the SSID argument leading to potential security issues.
Which versions of Castlenet CBW383G2N are impacted by CVE-2025-2213?
CVE-2025-2213 impacts all versions of Castlenet CBW383G2N up to and including 20250301.
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/title
- agent/description
- agent/type
- agent/first-publish-date
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/source
- agent/author
- agent/last-modified-date
- agent/severity
- agent/tags
- agent/event
- vendor/castlenet
- canonical/castlenet cbw383g2n