billion Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/billion/ Sun, 26 Feb 2023 06:30:45 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png billion Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/billion/ 32 32 CVE-2019-14920 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-14920/ Sun, 26 Feb 2023 06:30:45 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-14920/ Billion Smart Energy Router SG600R2 Firmware v3.02.rc6 allows an authenticated attacker to gain root execution privileges over the device via a hidden etc_ro/web/adm/system_command.asp shell feature.

The post CVE-2019-14920 appeared first on CVE Vulnerability.

]]> Billion Smart Energy Router SG600R2 Firmware v3.02.rc6 allows an authenticated attacker to gain root execution privileges over the device via a hidden etc_ro/web/adm/system_command.asp shell feature.

The post CVE-2019-14920 appeared first on CVE Vulnerability.

]]> CVE-2019-14918 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-14918/ Sun, 26 Feb 2023 06:30:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-14918/ XSS in the DHCP lease-status table in Billion Smart Energy Router SG600R2 Firmware v3.02.rc6 allows an attacker to inject arbitrary HTML/JavaScript code to achieve client-side code execution via crafted DHCP request packets to etc_ro/web/internet/dhcpcliinfo.asp.

The post CVE-2019-14918 appeared first on CVE Vulnerability.

]]> XSS in the DHCP lease-status table in Billion Smart Energy Router SG600R2 Firmware v3.02.rc6 allows an attacker to inject arbitrary HTML/JavaScript code to achieve client-side code execution via crafted DHCP request packets to etc_ro/web/internet/dhcpcliinfo.asp.

The post CVE-2019-14918 appeared first on CVE Vulnerability.

]]> CVE-2019-14919 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-14919/ Sun, 26 Feb 2023 06:30:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-14919/ An exposed Telnet Service on the Billion Smart Energy Router SG600R2 with firmware v3.02.rc6 allows a local network attacker to authenticate via hardcoded credentials into a shell, gaining root execution privileges over the device.

The post CVE-2019-14919 appeared first on CVE Vulnerability.

]]> An exposed Telnet Service on the Billion Smart Energy Router SG600R2 with firmware v3.02.rc6 allows a local network attacker to authenticate via hardcoded credentials into a shell, gaining root execution privileges over the device.

The post CVE-2019-14919 appeared first on CVE Vulnerability.

]]>