CVE:CVE-2018-19524
CNNVD:CNNVD-201902-576
Skyworth GPON HomeGateways和Optical Network terminals中存在输入验证错误漏洞，该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。以下产品和版本受到影响：DT741 Converged Intelligent Terminal (G/EPON+IPTV)；DT741 Converged Intelligent Terminal (G/EPON+IPTV)；DT721-cb GPON uplink home gateway (GPON+2FE+1POTS)；DT721-cb GPON Uplink Home Gateway (GPON+2FE+1POTS)；DT741-cb GPON uplink home gateway (GPON+4FE+1POTS+WIFI+USB)；DT741-cb GPON Uplink Home Gateway (GPON+4FE+1POTS+WIFI+USB)；DT741-cbGPON uplink home gateway DT741-cb。
solution:Upgrade skyworthdigital dt740_firmware to a higher version than sdotbgn1,and avoid the version sdotbgn1; Upgrade skyworthdigital dt721-cb_firmware to a higher version than sdotbgn1,and avoid the version sdotbgn1; Upgrade skyworthdigital dt741-cb_firmware to a higher version than sdotbgn1,and avoid the version sdotbgn1