Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AirTies Air4443 Firmware allows Cross-Site Scripting (XSS).

This issue affects Air4443 Firmware: through 14102024.




NOTE: The vendor was contacted and it was learned that the product classified as End-of-Life and End-of-Support.

Attack Vector Local

Attack Complexity Low

Privileges Required High

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact Low

Subsequent System Availability Impact Low

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00131.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
AirTies Air4443 Firmware affected
Version Status Constraints
0 affected ≤ 1.6.1.6

Configuration 1 [-]

AND
cpe:2.3:o:airties:air4443_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:airties:air4443:-:*:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Airties Subscribe
Air4443 Subscribe
Air4443 Firmware Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2024-49968 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AirTies Air4443 Firmware allows Cross-Site Scripting (XSS).This issue affects Air4443 Firmware: through 14102024. NOTE: The vendor was contacted and it was learned that the product classified as End-of-Life and End-of-Support.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1851 cve-icon cve-icon
https://www.usom.gov.tr/bildirim/tr-24-1851 cve-icon cve-icon
History

Tue, 02 Jun 2026 08:30:00 +0000

Type Values Removed Values Added
Description Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AirTies Air4443 Firmware allows Cross-Site Scripting (XSS).This issue affects Air4443 Firmware: through 14102024. NOTE: The vendor was contacted and it was learned that the product classified as End-of-Life and End-of-Support. Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AirTies Air4443 Firmware allows Cross-Site Scripting (XSS). This issue affects Air4443 Firmware: through 14102024. NOTE: The vendor was contacted and it was learned that the product classified as End-of-Life and End-of-Support.
References

Fri, 15 Nov 2024 23:15:00 +0000

Type Values Removed Values Added
First Time appeared Airties
Airties air4443
Airties air4443 Firmware
CPEs cpe:2.3:h:airties:air4443:-:*:*:*:*:*:*:*
cpe:2.3:o:airties:air4443_firmware:*:*:*:*:*:*:*:*
Vendors & Products Airties
Airties air4443
Airties air4443 Firmware
Metrics cvssV3_1

{'score': 6.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N'}

Wed, 13 Nov 2024 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 13 Nov 2024 14:45:00 +0000

Type Values Removed Values Added
Description Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AirTies Air4443 Firmware allows Cross-Site Scripting (XSS).This issue affects Air4443 Firmware: through 14102024. NOTE: The vendor was contacted and it was learned that the product classified as End-of-Life and End-of-Support.
Title XSS in AirTies' Air4443 Firmware
Weaknesses CWE-79
References
Metrics cvssV4_0

{'score': 4.6, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: TR-CERT

Published:

Updated: 2026-06-02T06:57:18.797Z

Reserved: 2024-10-03T13:11:05.798Z

Link: CVE-2024-9477

cve-icon Vulnrichment

Updated: 2024-11-13T18:34:34.005Z

cve-icon NVD

Status : Modified

Published: 2024-11-13T15:15:09.493

Modified: 2026-06-02T09:16:14.620

Link: CVE-2024-9477

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses