QwikSec

Security Database

CVE

CWE

Training

CVE-2024-9477

Published: Nov 13, 2024

Modified: Jun 2, 2026

PUBLISHED

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AirTies Air4443 Firmware allows Cross-Site Scripting (XSS). This issue affects Air4443 Firmware: through 14102024. NOTE: The vendor was contacted and it was learned that the product classified as End-of-Life and End-of-Support.

Vendor	Product	Versions
AirTies	Air4443 Firmware	affected `0 - <= 1.6.1.6`

Weaknesses (CWE)

References

https://www.usom.gov.tr/bildirim/tr-24-1851

government-resource

broken-link

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1851

government-resource

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.