PT-2025-14789 · Unknown · Lbt-T300-T400

Iotres · Published 2025-04-03 · Updated 2025-08-20 · CVE-2025-29570

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LBT-T300-T400 version 3.2

Description The issue allows a local attacker to escalate privileges via the tftp image check function of a binary named rc.

Recommendations For version 3.2, consider disabling the tftp image check function as a temporary workaround until a patch is available. Restrict access to the rc binary to minimize the risk of exploitation.

Exploit

Fix

LPE

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2025-29570

Affected Products

Lbt-T300-T400

References · 8

• 🔥 https://github.com/IOTRes/IOT_Firmware_Update/blob/main/firmwareupdate.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-29570 · Security Note
• https://osv.dev/vulnerability/CVE-2025-29570 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1907948023897866636 · Twitter Post
• https://t.me/cvedetector/22025 · Telegram Post
• https://t.me/cvetracker/20731 · Telegram Post
• https://twitter.com/CVEnew/status/1908072066919604548 · Twitter Post
• https://t.me/cveNotify/132855 · Telegram Post