The vulnerability of the config_3g_para function in the microprogramming software of the LBT-T300-T310 industrial router allows a hacker to execute arbitrary code.

The vulnerability of the config3gpara function in the microprogramming software of the LBT-T300-T310 industrial router lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code by sending a...

CVE-2025-7077: Buffer Copy without Checking Size of Input

A vulnerability classified as critical has been found in Shenzhen Libituo Technology LBT-T300-T310 up to 2.2.3.6. This affects the function config3gpara of the file /appy.cgi. The manipulation of the argument username3g/password3g leads to buffer overflow. It is possible to initiate the attack...

CVE-2024-40536

Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 were discovered to contain a stack overflow via the pin3gcode parameter in the config3gpara function...

CVE-2024-40535

Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 was discovered to contain a stack overflow via the apnname3g parameter in the config3gpara function...

CVE-2024-40536

Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 were discovered to contain a stack overflow via the pin3gcode parameter in the config3gpara function...

CVE-2024-40536

The Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 software is vulnerable to a stack overflow due to a failure to check the input size of the pin_3g_code parameter within the config_3g_para function. This flaw could lead to a crash or potential remote code execution. As a temporary worka...