Stack overflow

LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the apnname3g parameter in the setupEC20Apn function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

Stack overflow

LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the updateCurAPlist function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

LinBle LBT T300-T390 Security Vulnerability

The LinBle LBT T300-T390 is a 4G industrial router from LinBle China. A security vulnerability exists in the LinBle LBT T300-T390 v2.2.1.8, which is caused by a buffer overflow in the ApCliSsid parameter of the updateCurAPlist method...

CVE-2024-27571

LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the makeCurRemoteApList function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-27569

Summary: CVE-2024-27569 affects LBT T300-T390 v2.2.1.8. A stack overflow comes from the ApCliSsid parameter in the init_nvram function, enabling a Denial of Service via a crafted POST request. The Red Hat and NVD entries corroborate the same description. The PT-Security entry provides practical m...

CVE-2024-27567

LBT T300- T390 v2.2.1.8 were discovered to contain a stack overflow via the vpnclientip parameter in the configvpnpptp function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-27570

Affected product: LBT T300-T390 v2.2.1.8 (industrial router). Vulnerability: stack overflow in the ApCliSsid parameter of the generate_conf_router function. Impact: Denial of Service via a crafted POST request. Notes: Multiple connected documents corroborate the issue; no patch/version fix detail...

CVE-2024-27568

CVE-2024-27568 affects LBT T300-T390 v2.2.1.8. A stack overflow in the setupEC20Apn function, triggered by the apn_name_3g parameter, enables DoS via a crafted POST request. Connected sources confirm the exact vulnerability path but do not provide mitigation details or patched versions. No exploi...