CVE-2024-29243

Shenzhen Libituo Technology Co., Ltd LBT-T300-mini v1.2.9 was discovered to contain a buffer overflow via the vpnclientip parameter at /apply.cgi...

CVE-2024-29243

CVE-2024-29243 affects Shenzhen Libituo Technology Co., Ltd LBT-T300-mini v1.2.9, with a vulnerability in the VPN API endpoint (vpn_client_ip at /apply.cgi) that allows a buffer overflow. The Red Hat and CNNVD entries corroborate a buffer overflow condition; PT-Security notes a workaround: avoid ...

CVE-2024-29244

The CVE-2024-29244 affects Shenzhen Libituo Technology Co., Ltd LBT-T300-mini v1.2.9. It is a buffer overflow vulnerability triggered by the pin_code_3g parameter in the /apply.cgi endpoint. CVSSv3.1 base score is 5.3 (Medium) with Network attack vector, Low integrity impact, Low availability imp...

CVE-2024-28446

Shenzhen Libituo Technology Co., Ltd LBT-T300-mini1 v1.2.9 was discovered to contain a buffer overflow via lannetmask parameter at /apply.cgi...

CVE-2024-28446

CVE-2024-28446 affects Shenzhen Libituo Technology Co., Ltd LBT-T300-mini1 (v1.2.9). A buffer overflow is triggered by the lan_netmask parameter via the /apply.cgi API endpoint. CVSS v3.1 base score 5.7 (AV:A, AC:L, PR:L, UI:N, S:U, C:N, I:N, A:H). Connected sources consistently list LBT-T300-min...

CVE-2024-28447

Shenzhen Libituo Technology Co., Ltd LBT-T300-mini1 v1.2.9 was discovered to contain a buffer overflow via lanipaddr parameters at /apply.cgi...

Shenzhen Libituo Technology LBT-T300-mini1 Security Breach

Shenzhen Libituo Technology LBT-T300-mini1 is a 5G industrial router from Shenzhen Libituo Technology China. A security vulnerability exists in the Shenzhen Libituo Technology LBT-T300-mini1 v1.2.9, which is caused by a buffer overflow in the lannetmask parameter via /apply.cgi...

Shenzhen Libituo Technology LBT-T300-mini1 Security Breach

Shenzhen Libituo Technology LBT-T300-mini1 is a 5G industrial router from Shenzhen Libituo Technology China. A security vulnerability exists in the Shenzhen Libituo Technology LBT-T300-mini1 v1.2.9, which is caused by a buffer overflow in the lanipaddr parameter via /apply.cgi...

CVE-2024-28447

The CVE-2024-28447 entry concerns Shenzhen Libituo Technology Co., Ltd LBT-T300-mini1 (v1.2.9). The issue is a buffer overflow triggered by the lan_ipaddr parameter in the /apply.cgi API endpoint. CVSS 3.1 metrics indicate Adjacent attack vector, Low attack complexity, No privileges required, No ...

PT-2024-22440 · Shenzhen Libituo Technology Co. · Lbt-T300-Mini1

Name of the Vulnerable Software and Affected Versions: Shenzhen Libituo Technology Co., Ltd LBT-T300-mini1 version 1.2.9 Description: A buffer overflow issue was discovered via the lan ipaddr parameters at the "/apply.cgi" API endpoint. Recommendations: For version 1.2.9, consider restricting...

CVE-2024-27570

LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the generateconfrouter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-27567

LBT T300- T390 v2.2.1.8 were discovered to contain a stack overflow via the vpnclientip parameter in the configvpnpptp function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-27567

LBT T300- T390 v2.2.1.8 were discovered to contain a stack overflow via the vpnclientip parameter in the configvpnpptp function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-27570

LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the generateconfrouter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-27569

LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the initnvram function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-27568

LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the apnname3g parameter in the setupEC20Apn function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-27568

LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the apnname3g parameter in the setupEC20Apn function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-27572

LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the updateCurAPlist function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

Stack overflow

LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the generateconfrouter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

Stack overflow

LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the makeCurRemoteApList function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...