CVE-2024-40114: Sitecom Wlx-2006 Firmware

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

A Cross Site Scripting (XSS) vulnerability in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before allows an attacker to manipulate the language cookie to inject malicious JavaScript code.

Affected products

• Sitecom Wlx-2006 Firmware: up to and including 1.5

Published 2025-06-02. Last modified 2026-06-17.