PT-2019-9850 · Shenzhen Skyworth · Shenzhen Skyworth Dt721-Cb+2
Kaustubh G. Padwad
+1
·
Published
2019-03-17
·
Updated
2019-05-08
·
CVE-2018-19524
CVSS v2.0
10
Critical
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Shenzhen Skyworth DT741 Converged Intelligent Terminal (G/EPON+IPTV) SDOTBGN1 version not specified
Shenzhen Skyworth DT721-cb SDOTBGN1 version not specified
Shenzhen Skyworth DT741-cb SDOTBGN1 version not specified
Description
An issue was discovered that allows remote attackers to cause a denial of service or achieve unauthenticated remote code execution. This is possible due to control of certain registers when a long password is passed to the Web passwd function.
Recommendations
For Shenzhen Skyworth DT741 Converged Intelligent Terminal (G/EPON+IPTV) SDOTBGN1, consider restricting access to the Web passwd function until a fix is available.
For Shenzhen Skyworth DT721-cb SDOTBGN1, consider restricting access to the Web passwd function until a fix is available.
For Shenzhen Skyworth DT741-cb SDOTBGN1, consider restricting access to the Web passwd function until a fix is available.
At the moment, there is no information about a newer version that contains a fix for this issue.
Exploit
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Shenzhen Skyworth Dt721-Cb
Shenzhen Skyworth Dt741 Converged Intelligent Terminal
Shenzhen Skyworth Dt741-Cb