Castlenet CBW383G2N Cross-Site Scripting Vulnerability in Wireless Menu

A cross-site scripting (XSS) vulnerability has been identified in the Castlenet CBW383G2N wireless router, affecting versions through 20250301. The issue arises in the Wireless Menu component, specifically within the '/wlanPrimaryNetwork.asp' file. The vulnerability is triggered by manipulating the 'SSID' parameter with a crafted input, which is not properly sanitized before being output to users. This flaw allows remote attackers to execute arbitrary scripts in the context of the user's browser session.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's session.

Reproduction

To reproduce this vulnerability, log into the affected router's interface and navigate to the Wireless Menu. Access the '/wlanPrimaryNetwork.asp' file and input a crafted 'SSID' value that includes an image tag with an 'onerror' event. This will trigger the cross-site scripting vulnerability by executing the injected script.