Unrated severityNVD Advisory· Published Jan 9, 2020· Updated Aug 5, 2024
CVE-2019-14918
CVE-2019-14918
Description
XSS in the DHCP lease-status table in Billion Smart Energy Router SG600R2 Firmware v3.02.rc6 allows an attacker to inject arbitrary HTML/JavaScript code to achieve client-side code execution via crafted DHCP request packets to etc_ro/web/internet/dhcpcliinfo.asp.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Billion/Smart Energy Router SG600R2 Firmwaredescription
- Range: = v3.02.rc6
Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.