Sitecom WLX-2006 Wall Mount Range Extender N300 up to 1.5 default credentials

Summaryinfo

A vulnerability, which was classified as critical, was found in Sitecom WLX-2006 Wall Mount Range Extender N300 up to 1.5. The affected element is an unknown function. Such manipulation leads to default credentials. This vulnerability is traded as CVE-2024-40113. There is no exploit available.

Detailsinfo

A vulnerability, which was classified as critical, has been found in Sitecom WLX-2006 Wall Mount Range Extender N300 up to 1.5. Affected by this issue is some unknown functionality. The manipulation with an unknown input leads to a default credentials vulnerability. Using CWE to declare the problem leads to CWE-1392. The product uses default credentials (such as passwords or cryptographic keys) for potentially critical functionality. The impact remains unknown. CVE summarizes:

Sitecom WLX-2006 Wall Mount Range Extender N300 v.1.5 and before is vulnerable to Use of Default Credentials.

The advisory is shared for download at sitecomlearningcentre.com. This vulnerability is handled as CVE-2024-40113 since 07/05/2024. The exploitation is known to be easy. No form of authentication is required for exploitation. There are neither technical details nor an exploit publicly available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2024-54621). Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• Sitecom

Name

• WLX-2006 Wall Mount Range Extender N300

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion