Lbt-t300-t400 Firmware vulnerabilities

3 known vulnerabilities in Lbt-t300-t400 Firmware from Szlbt. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Lbt-t300-t400 Firmware: Incorrect Default Permissions

  CVE-2025-29570Apr 3, 2025Szlbt

  An issue in Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 allows a local attacker to escalate privileges via the function tftp_image_check of a binary named rc.

• 9.8 Critical severity

  lbt-t300-t400_firmware: Stack-based Buffer Overflow

  CVE-2024-40535Jul 16, 2024Szlbt

  Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 was discovered to contain a stack overflow via the apn_name_3g parameter in the config_3g_para function.

• 7.8 High severity

  lbt-t300-t400_firmware: Buffer Copy without Checking Size of Input

  CVE-2024-32324Apr 25, 2024Szlbt

  Buffer Overflow vulnerability in Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v.3.2 allows a local attacker to execute arbitrary code via the vpn_client_ip variable of the config_vpn_pptp function in rc program.