CVE-2024-39363

MEDIUM 6.1CVE-2024-39363 · Published 14/01/2025 · updated 17/06/2026

In short

CVE-2024-39363 is a MEDIUM (CVSS 6.1) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 49.0%, higher than 98.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A cross-site scripting (xss) vulnerability exists in the login.cgi set_lang_CountryCode() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

References

talosintelligence.com/vulnerability_reports/TALOS-2024-2017 · Exploit
talosintelligence.com/vulnerability_reports/TALOS-2024-2017 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free