CVE-2024-27568

LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the apnname3g parameter in the setupEC20Apn function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

PT-2024-21951 · Unknown · Lbt T300-T390

Name of the Vulnerable Software and Affected Versions: LBT T300-T390 version 2.2.1.8 Description: The issue is related to a stack overflow via the apn name 3g parameter in the setupEC20Apn function, allowing attackers to cause a Denial of Service DoS via a crafted POST request to an unspecified A...

CVE-2024-27568

The LBT T300-T390 4G industrial router (version v2.2.1.8 ) contains a stack-based buffer overflow vulnerability. The flaw exists in the setupEC20Apn function, specifically triggered by the apn_name_3g parameter. An attacker can exploit this by sending a crafted POST request to an unspecified API ...

LinBle LBT T300-T390 Security Vulnerability

The LinBle LBT T300-T390 is a 4G industrial router from LinBle China. A security vulnerability exists in the LinBle LBT T300-T390 version v2.2.1.8, which stems from a buffer overflow in the apnname3g parameter of the setupEC20Apn method...

CVE-2023-40125

In onCreate of ApnEditor.java, there is a possible way for a Guest user to change the APN due to a permission bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40125

In onCreate of ApnEditor.java, there is a possible way for a Guest user to change the APN due to a permission bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40125

In onCreate of ApnEditor.java, there is a possible way for a Guest user to change the APN due to a permission bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-279902472

In onCreate of ApnEditor.java, there is a possible way for a Guest user to change the APN due to a permission bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Code injection

Cleartext storage of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier, which may allow a remote authenticated attacker to obtain an APN credential for the product...

CVE-2023-24586

Cleartext storage of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier, which may allow a remote authenticated attacker to obtain an APN credential for the product...

CVE-2023-24586

The CVE-2023-24586 entry concerns Cleartext storage of sensitive information in Seiko SkyBridge MB-A100/110 firmware (Ver. 4.2.0 and earlier) that may allow a remote authenticated attacker to obtain an APN credential. Affected products and fixes per the sources: MB-A100/110 firmware 4.2.0 and ear...

CVE-2023-24586: Cleartext Storage of Sensitive Information

Cleartext storage of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier, which may allow a remote authenticated attacker to obtain an APN credential for the product...

Memory corruption

Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length...

CVE-2022-33302 Improper validation of array index in User Identity Module

Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length...

CVE-2022-33302

CVE-2022-33302 describes a memory corruption in the Qualcomm User Identity Module caused by improper validation of an array index when the APN TLV length exceeds the command length. Documents reference this vulnerability across multiple feeds (NVD, Red Hat, PRION, CNNVD, CVE list) with the same d...

Malicious code in wf_apn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f01c53fc0839183701573003861341005906ad7c0dcf0f3005a411f64dfa875f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-0997

In handleUpdateNetworkState of GnssNetworkConnectivityHandler.java , there is a possible APN disclosure due to log information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Information disclosure

In handleUpdateNetworkState of GnssNetworkConnectivityHandler.java , there is a possible APN disclosure due to log information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2021-0997

In handleUpdateNetworkState of GnssNetworkConnectivityHandler.java , there is a possible APN disclosure due to log information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2021-0997

CVE-2021-0997 affects Android 12; the issue is in GnssNetworkConnectivityHandler.java (handleUpdateNetworkState) where a log information disclosure enables local information disclosure with no extra privileges and without user interaction. Exploitation requires local access; impact is confidentia...