CVE-2024-28446

2024-03-1900:00:00

mitre

github.com

shenzhen libituo technology

buffer overflow

lan netmask parameter

apply.cgi

cve-2024-28446

AI Score

7.9

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

Shenzhen Libituo Technology Co., Ltd LBT-T300-mini1 v1.2.9 was discovered to contain a buffer overflow via lan_netmask parameter at /apply.cgi.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:szlbt:lbt-t300-mini_firmware:1.2.9:*:*:*:*:*:*:*"
    ],
    "vendor": "szlbt",
    "product": "lbt-t300-mini_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "1.2.9"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

github.com/AdamRitz/lbtvul/blob/main/t300mini.md