PT-2024-28903 · Shenzhen Libituo Technology Co. · Lbt-T300-T400

Published 2024-07-16 · Updated 2024-12-06 · CVE-2024-40536

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 version 3.2

Description A stack overflow issue was discovered via the pin 3g code parameter in the config 3g para function.

Recommendations For version 3.2, avoid using the pin 3g code parameter in the config 3g para function until a fix is available. As a temporary workaround, consider restricting access to the config 3g para function to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2024-40536

Affected Products

Lbt-T300-T400

References · 5

• 🔥 https://github.com/tt01bolt/vul/blob/main/LBT-T300-T400_Buffer%20overflow.md · Exploit
• https://osv.dev/vulnerability/CVE-2024-40536 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-40536 · Security Note
• https://t.me/cvenotify/86431 · Telegram Post
• https://t.me/cvedetector/1006 · Telegram Post