CVE-2019-14920

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2020-01-09 · updated 2026-06-17

Description

Billion Smart Energy Router SG600R2 Firmware v3.02.rc6 allows an authenticated attacker to gain root execution privileges over the device via a hidden etc_ro/web/adm/system_command.asp shell feature.

Affected products

Billion Sg600 R2 Firmware: 3.02-rc6

References

https://github.com/InnotecSystem/Device-Reversing/wiki/Firmware-Inspection
https://github.com/InnotecSystem/Device-Reversing/wiki/Firmware-Inspection

Get alerted when CVE-2019-14920 or the next vulnerability affects your stack