CVE-2025-9119: Netis WF2419 Wireless Settings index.htm cross site scripting
A vulnerability was determined in Netis WF2419 1.2.29433. This vulnerability affects unknown code of the file /index.htm of the component Wireless Settings Page. This manipulation of the argument SSID with the input <img/src/onerror=prompt(8)> causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9119?
CVE-2025-9119 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2025-9119?
To fix CVE-2025-9119, ensure that you apply the latest firmware update provided by Netis for the WF2419 model.
What is the impact of CVE-2025-9119?
The impact of CVE-2025-9119 allows attackers to execute arbitrary JavaScript in the context of the victim's session, potentially leading to data theft.
What components are affected by CVE-2025-9119?
CVE-2025-9119 affects the Wireless Settings Page component of the Netis WF2419 router.
Can CVE-2025-9119 be exploited remotely?
Yes, CVE-2025-9119 can be exploited remotely if an attacker tricks a user into accessing a specially crafted URL.