Published: 21/03/2019 Updated: 08/05/2019

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

An issue exists on Shenzhen Skyworth DT741 Converged Intelligent Terminal (G/EPON+IPTV) SDOTBGN1, DT721-cb SDOTBGN1, and DT741-cb SDOTBGN1 devices. A long password to the Web_passwd function allows remote malicious users to cause a denial of service (segmentation fault) or achieve unauthenticated remote code execution because of control of registers S0 through S4 and T4 through T7.

Vulnerable Product	Search on Vulmon	Subscribe to Product
skyworthdigital dt740_firmware sdotbgn1
skyworthdigital dt721-cb_firmware sdotbgn1
skyworthdigital dt741-cb_firmware sdotbgn1

''' ======================================================== Unauthenticated Stack Overflow in Multiple Gpon Devices ======================================================== contents:: Table Of Content Overview ======== Title:- StackOverflow in Multiple Skyworth GPON HomeGateways and Optical Network terminals CVE-ID :- CVE-2018-19524 Author ...

A stack overflow vulnerability has been identified in multiple Skyworth GPON HomeGateways and Optical Network terminals Affected products include 1DT741 Converged Intelligent Terminal (G/EPON+IPTV), 2DT741 Converged Intelligent Terminal (G/EPON+IPTV), 3DT721-cb GPON uplink home gateway (GPON+2FE+1POTS), 4DT721-cb GPON Uplink Home Gateway (GPON ...

CWE-20 https://www.exploit-db.com/exploits/46358/https://seclists.org/bugtraq/2019/Feb/21 http://seclists.org/fulldisclosure/2019/Feb/30 http://packetstormsecurity.com/files/151608/Skyworth-GPON-HomeGateways-Optical-Network-Stack-Overflow.html https://www.breakthesec.com/2019/02/cve-2018-19524-stack-overflow-in.html https://s3curityb3ast.github.io/KSA-Dev-001.md https://nvd.nist.gov https://www.exploit-db.com/exploits/46358

CVE-2018-19524

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect