Description
Missing hostname validation in Swisscom Centro Grande before 6.16.12 allows a remote attacker to inject its local IP address as a domain entry in the DNS service of the router via crafted hostnames in DHCP requests, causing XSS.
Unscored
CVE-2019-19941
EUVD-2019-9529GHSA-pc2g-7fx7-8p9p
Missing hostname validation in Swisscom Centro Grande before 6.16.12 allows a remote attacker to inject its local IP address as a domain en…
Published Mar 16, 2020 · Updated Aug 5, 2024 · Assigned by mitre