PT-2023-31570 · Shenzhen Libituo Technology Co. · Lbt-T300-T310

Publicado 2023-12-15 · Atualizado 2023-12-19 · CVE-2023-50469

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Shenzhen Libituo Technology Co., Ltd LBT-T300-T310 version 2.2.2.6

Description A buffer overflow issue was discovered via the ApCliEncrypType parameter at the "/apply.cgi" API endpoint.

Recommendations For version 2.2.2.6, consider disabling access to the "/apply.cgi" API endpoint until a patch is available to prevent exploitation of the buffer overflow via the ApCliEncrypType parameter. Avoid using the ApCliEncrypType parameter in the affected API endpoint until the issue is resolved.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-120

Identificadores relacionados

CVE-2023-50469

Produtos afetados

Lbt-T300-T310

Referências · 5

• 🔥 https://github.com/forever-more-cjy/overflow/blob/main/LBT-T310%20Buffer%20overflow.md · Exploit
• https://twitter.com/CVEnew/status/1735946026887061740 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2023-50469 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-50469 · Nota de Segurança
• https://t.me/cvenotify/63844 · Publicação no Telegram