Medium severity5.9NVD Advisory· Published Jun 2, 2025· Updated Jun 17, 2026

CVE-2024-40112

Description

A Local File Inclusion (LFI) vulnerability exists in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before, which allows an attacker to manipulate the "language" cookie to include arbitrary files from the server. This vulnerability can be exploited to disclose sensitive information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Sitecom/Wlx 2006 Firmware
cpe:2.3:o:sitecom:wlx-2006_firmware:*:*:*:*:*:*:*:*
Range: <=1.5
Sitecom/WLX-2006 Wall Mount Range Extender N300description
Sitecom/WLX-2006 Wall Mount Range Extender N300llm-create
Range: <=v1.5

Patches

Vulnerability mechanics

References

github.com/Emm448/vulnerability-research/tree/main/CVE-2024-40112nvdExploitThird Party Advisory
www.sitecomlearningcentre.com/products/wlx-2006v1001/wi-fi-range-extender-n300/downloadsnvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.384
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000