Medium severity6.1NVD Advisory· Published Jun 2, 2025· Updated Jun 17, 2026

CVE-2024-40114

Description

A Cross Site Scripting (XSS) vulnerability in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before allows an attacker to manipulate the language cookie to inject malicious JavaScript code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Sitecom/Wlx 2006 Firmware
cpe:2.3:o:sitecom:wlx-2006_firmware:*:*:*:*:*:*:*:*
Range: <=1.5
Sitecom/WLX-2006 Wall Mount Range Extender N300description
Sitecom/WLX-2006 Wall Mount Range Extender N300llm-create
Range: <=v1.5

Patches

Vulnerability mechanics

References

github.com/Emm448/vulnerability-research/tree/main/CVE-2024-40114nvdExploitThird Party Advisory
www.sitecomlearningcentre.com/products/wlx-2006v1001/wi-fi-range-extender-n300/downloadsnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000