PT-2025-14789 · Unknown · Lbt-T300-T400
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
LBT-T300-T400 version 3.2
Description
The issue allows a local attacker to escalate privileges via the
tftp image check function of a binary named rc.Recommendations
For version 3.2, consider disabling the
tftp image check function as a temporary workaround until a patch is available. Restrict access to the rc binary to minimize the risk of exploitation.Exploit
Fix
LPE
Incorrect Default Permissions
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Lbt-T300-T400