TROYANOSYVIRUS
Volver a CVEs

CVE-2025-9119

LOW
2.4

Descripcion

A vulnerability was determined in Netis WF2419 1.2.29433. This vulnerability affects unknown code of the file /index.htm of the component Wireless Settings Page. This manipulation of the argument SSID with the input <img/src/onerror=prompt(8)> causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Detalles CVE

Puntuacion CVSS v3.12.4
SeveridadLOW
Vector CVSSCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
Vector de ataqueNETWORK
ComplejidadLOW
Privilegios requeridosHIGH
Interaccion usuarioREQUIRED
Publicado8/18/2025
Ultima modificacion8/19/2025
Fuentenvd
Avistamientos honeypot0

Debilidades (CWE)

CWE-79CWE-94

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.