Medium severity5.4NVD Advisory· Published Jan 9, 2020· Updated Jun 17, 2026
CVE-2019-14918
CVE-2019-14918
Description
XSS in the DHCP lease-status table in Billion Smart Energy Router SG600R2 Firmware v3.02.rc6 allows an attacker to inject arbitrary HTML/JavaScript code to achieve client-side code execution via crafted DHCP request packets to etc_ro/web/internet/dhcpcliinfo.asp.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:o:billion:sg600_r2_firmware:3.02:rc6:*:*:*:*:*:*
- Billion/Smart Energy Router SG600R2 Firmwaredescription
- Range: v3.02.rc6
Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.