PT-2023-31570 · Shenzhen Libituo Technology Co. · Lbt-T300-T310

Published 2023-12-15 · Updated 2023-12-19 · CVE-2023-50469

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Shenzhen Libituo Technology Co., Ltd LBT-T300-T310 version 2.2.2.6

Description A buffer overflow issue was discovered via the ApCliEncrypType parameter at the "/apply.cgi" API endpoint.

Recommendations For version 2.2.2.6, consider disabling access to the "/apply.cgi" API endpoint until a patch is available to prevent exploitation of the buffer overflow via the ApCliEncrypType parameter. Avoid using the ApCliEncrypType parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2023-50469

Affected Products

Lbt-T300-T310

References · 5

• 🔥 https://github.com/forever-more-cjy/overflow/blob/main/LBT-T310%20Buffer%20overflow.md · Exploit
• https://osv.dev/vulnerability/CVE-2023-50469 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-50469 · Security Note
• https://twitter.com/CVEnew/status/1735946026887061740 · Twitter Post
• https://t.me/cvenotify/63844 · Telegram Post