CVE-2025-2213
Last modified
CVE-2025-2213 is a medium-severity vulnerability rated 4.8/10 on the CVSS scale. A vulnerability was found in Castlenet CBW383G2N up to 20250301. It has been declared as problematic. EPSS estimates a 0.35% chance of exploitation in the next 30 days.
Description
A vulnerability was found in Castlenet CBW383G2N up to 20250301. It has been declared as problematic. This vulnerability affects unknown code of the file /wlanPrimaryNetwork.asp of the component Wireless Menu. The manipulation of the argument SSID with the input <img/src/onerror=prompt(8)> leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way.
Metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Castlenet | Cbw383g2n Firmware | <= 2025-03-01 |
References
- https://vuldb.com/?ctiid.299284Permissions Required, VDB Entry
- https://vuldb.com/?id.299284Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.511882Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-2213?
How severe is CVE-2025-2213?
How do I fix CVE-2025-2213?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-22124In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2025-22125In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2025-22126In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2025-22127In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2025-22128In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2025-22129Tuleap is an Open Source Suite to improve management of soft…4.3
- CVE-2025-22130Soft Serve is a self-hostable Git server for the command lin…8.8
- CVE-2025-22131PhpSpreadsheet is a PHP library for reading and writing spre…6.1
- CVE-2025-22132WeGIA is a web manager for charitable institutions. A Cross-…4.8
- CVE-2025-22133WeGIA is a web manager for charitable institutions. Prior to…9.9
- CVE-2025-22134When switching to other buffers using the :all command and v…5.5
- CVE-2025-22136Tabby (formerly Terminus) is a highly configurable terminal …8.6
Are you affected by CVE-2025-2213?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST