PT-2023-30405
CVE-2023-47307
·
تاريخ النشر
2023-11-30
·
تاريخ التحديث
2023-12-06
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Shenzhen Libituo Technology Co., Ltd LBT-T300-T310 version 2.2.2.6
Description
The issue is related to a Buffer Overflow that allows attackers to cause a denial of service. This is achieved via the
ApCliAuthMode parameter in the "/apply.cgi" API endpoint.Recommendations
For version 2.2.2.6, consider disabling access to the "/apply.cgi" API endpoint or restricting the use of the
ApCliAuthMode parameter until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾