← Database

CVE-2024-40112

MEDIUM CVSS: 5.9 Published: 2025-06-02 Modified: 2026-06-17

Description

A Local File Inclusion (LFI) vulnerability exists in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before, which allows an attacker to manipulate the "language" cookie to include arbitrary files from the server. This vulnerability can be exploited to disclose sensitive information.

Affected Platforms

Sitecom Wlx-2006 FirmwareSitecom Wlx-2006

Weakness Type

CWE-98

References