cve/2019/CVE-2019-19942.md

18 lines
834 B
Markdown
Raw Normal View History

2024-05-26 14:27:05 +02:00
### [CVE-2019-19942](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19942)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
### Description
Missing output sanitation in Swisscom Centro Grande Centro Grande before 6.16.12, Centro Business 1.0 (ADB) before 7.10.18, and Centro Business 2.0 before 8.02.04 allows a remote attacker to perform DNS spoofing against the web interface via crafted hostnames in DHCP requests.
### POC
#### Reference
- https://www.swisscom.ch/content/dam/swisscom/de/about/nachhaltigkeit/digitale-schweiz/sicherheit/bug-bounty/files/cve-2019-19940ff.txt
#### Github
No PoCs found on GitHub currently.