castlenet vulnerabilities

Products

• CBW383G2N 2
• cbw383g2n firmware 2
• cbv38z4ec firmware 1
• cbv38z4ecnit firmware 1
• cbw383g4j firmware 1
• cbw38g4j firmware 1

Latest castlenet CVEs

Newest publication first

1. CVE-2025-2213 Castlenet CBW383G2N Wireless Menu wlanPrimaryNetwork.asp cross site scripting

   Published 2025-03-11

   Medium·CVSS 4.8 EPSS 0.38%

   A vulnerability was found in Castlenet CBW383G2N up to 20250301. It has been declared as problematic. This vulnerability affects unknown code of the file /wlanPrimaryNetwork.asp of the component Wireless Menu. The manipulation of the argument SSID with the input <img/src/onerror=...

2. CVE-2025-2212 Castlenet CBW383G2N RgSwInfo.asp cross site scripting

   Published 2025-03-11

   Medium·CVSS 4.8 EPSS 0.40%

   A vulnerability was found in Castlenet CBW383G2N up to 20250301. It has been classified as problematic. This affects an unknown part of the file /RgSwInfo.asp. The manipulation of the argument Description with the input <img/src/onerror=prompt(8)> leads to cross site scripting. I...

3. CVE-2018-20385 CastleNet CBV38Z4EC 125.553mp1.39219mp1.899.007, CBV38Z4ECNIT 125.553mp1.39219mp1.899.005ITT, CBW383G4J 37.556mp5.008, and CBW38G4J 37.553mp1.008 devices allow remote attackers to discover credentials...

   Published 2018-12-23

   Critical·CVSS 9.8 EPSS 1.5%

   CastleNet CBV38Z4EC 125.553mp1.39219mp1.899.007, CBV38Z4ECNIT 125.553mp1.39219mp1.899.005ITT, CBW383G4J 37.556mp5.008, and CBW38G4J 37.553mp1.008 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 S...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.