CVE-2025-9119 | Netis WF2419 1.2.29433 Wireless Settings Page /index.htm SSID cross site scripting

A vulnerability identified as problematic has been detected in Netis WF2419 1.2.29433. This vulnerability affects unknown code of the file /index.htm of the component Wireless Settings Page. This manipulation of the argument SSID with the input <img/src/onerror=prompt(8)> causes cross site scripting.

This vulnerability is registered as CVE-2025-9119. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.