PT-2023-31570 · Shenzhen Libituo Technology Co. · Lbt-T300-T310
CVE-2023-50469
·
Publicado
2023-12-15
·
Atualizado
2023-12-19
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Shenzhen Libituo Technology Co., Ltd LBT-T300-T310 version 2.2.2.6
Description
A buffer overflow issue was discovered via the
ApCliEncrypType parameter at the "/apply.cgi" API endpoint.Recommendations
For version 2.2.2.6, consider disabling access to the "/apply.cgi" API endpoint until a patch is available to prevent exploitation of the buffer overflow via the
ApCliEncrypType parameter.
Avoid using the ApCliEncrypType parameter in the affected API endpoint until the issue is resolved.Exploit
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Lbt-T300-T310