4 matches found
CVE-2019-19942
CVE-2019-19942 affects Swisscom Centro Grande (before 6.16.12), Centro Business 1.0 (ADB) (before 7.10.18), and Centro Business 2.0 (before 8.02.04). Root cause: missing output sanitation in the web interface, enabling a remote attacker to perform DNS spoofing via crafted hostnames in DHCP reques...
CVE-2019-19940
The CVE-2019-19940 entry concerns Swisscom Centro Grande prior to 6.16.12, where incorrect input sanitation in text-oriented interfaces (telnet/ssh) lets remote authenticated users run arbitrary commands via command injection. The vulnerability is tied to text-based UIs and requires authenticatio...
CVE-2019-19941
CVE-2019-19941 affects Swisscom Centro Grande routers present before version 6.16.12. The flaw is missing hostname validation in the DNS service, allowing a remote attacker to craft DHCP hostnames that inject the attacker's local IP as a domain entry, which can result in cross-site scripting via ...