Vulnerabilities

TI-2024-26875 CVE-2024-40114 · GHSA-hh39-985p-g37g

A Cross Site Scripting (XSS) vulnerability in Sitecom WLX-2006 Wall Mount Range Extender…

MEDIUM 62

A Cross Site Scripting (XSS) vulnerability in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before allows an attacker to manipulate the language cookie to inject malicious JavaScript code.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00276 Published 2025-06-02 No fix listed CWE-79

TI-2024-26874 CVE-2024-40113 · GHSA-3h3m-9w6m-92hw

Sitecom WLX-2006 Wall Mount Range Extender N300 v.1.5 and before is vulnerable to Use of Default Credentials.

MEDIUM 62

Sitecom WLX-2006 Wall Mount Range Extender N300 v.1.5 and before is vulnerable to Use of Default Credentials.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00288 Published 2025-06-02 No fix listed CWE-1392

TI-2024-26873 CVE-2024-40112 · GHSA-j3qf-mq3f-rgcf

A Local File Inclusion (LFI) vulnerability exists in Sitecom WLX-2006 Wall Mount Range…

MEDIUM 60

A Local File Inclusion (LFI) vulnerability exists in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before, which allows an attacker to manipulate the "language" cookie to include arbitrary files from the serve…

CVSS 3.1MEDIUM 5.9 Local No auth No interaction EPSS 0.00522 Published 2025-06-02 No fix listed CWE-98

TI-2013-05578 CVE-2013-6786 · GHSA-cqrh-v7qh-v682

Cross-site scripting (XSS) vulnerability in Allegro RomPager before 4.51, as used on the…

LOW 24

Cross-site scripting (XSS) vulnerability in Allegro RomPager before 4.51, as used on the ZyXEL P660HW-D1, Huawei MT882, Sitecom WL-174, TP-LINK TD-8816, and D-Link DSL-2640R and DSL-2641R, when the "forbidden author head…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02172 Published 2014-01-16 No fix listed CWE-79

TI-2012-01699 CVE-2012-1922 · GHSA-f77h-vw5c-68v8

Multiple cross-site request forgery (CSRF) vulnerabilities in Sitecom WLM-2501 allow…

LOW 33

Multiple cross-site request forgery (CSRF) vulnerabilities in Sitecom WLM-2501 allow remote attackers to hijack the authentication of administrators for requests that modify settings for (1) Mac Filtering via admin/formF…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01389 Published 2013-01-24 No fix listed CWE-352

TI-2012-01698 CVE-2012-1921 · GHSA-qp27-9vjr-p3c5

Cross-site request forgery (CSRF) vulnerability in goform/admin/formWlEncrypt in Sitecom…

LOW 32

Cross-site request forgery (CSRF) vulnerability in goform/admin/formWlEncrypt in Sitecom WLM-2501 allows remote attackers to hijack the authentication of administrators for requests that change the router passphrase via…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00956 Published 2012-08-26 No fix listed CWE-352

TI-2011-03875 CVE-2011-4503 · GHSA-ffcg-78g8-hcrr

The UPnP IGD implementation in Broadcom Linux on the Sitecom WL-111 allows remote…

LOW 37

The UPnP IGD implementation in Broadcom Linux on the Sitecom WL-111 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02094 Published 2011-11-22 No fix listed CWE-16

TI-2011-03874 CVE-2011-4502 · GHSA-3pxq-4mq2-m2mc

The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware…

MEDIUM 51

The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmwa…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05484 Published 2011-11-22 No fix listed CWE-78

TI-2011-03873 CVE-2011-4501 · GHSA-w7jg-8v8v-4jpc

The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware…

MEDIUM 50

The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmwa…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04201 Published 2011-11-22 No fix listed CWE-16

TI-2006-02491 CVE-2006-2560 · GHSA-6583-cq39-w34q

Sitecom WL-153 router firmware before 1.38 allows remote attackers to bypass access…

LOW 36

Sitecom WL-153 router firmware before 1.38 allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter, which is not validated, as…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01548 Published 2006-05-24 No fix listed CWE-264

Vulnerabilities

Filters