High severity · published Mar 1, 2024
CVE-2024-27570
LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the generate_conf_router function
7.5
CVSS
0.7%
EPSS
No
On KEV
Description
LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the generate_conf_router function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 54% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LF
Lbt-t300-t390 Firmware · Libtor
2.2.1.8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-27570
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-27570
Exploit
https://github.com/cvdyfbwa/IoT_LBT_Router/blob/main/generate_conf_router.md
More from Lbt-t300-t390 Firmware
7.5
CVE-2024-27571
LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the makeCurRemoteApList function
7.5
CVE-2024-27572
LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the updateCurAPlist function
6.5
CVE-2024-27567
LBT T300- T390 v2.2.1.8 were discovered to contain a stack overflow via the vpn_client_ip parameter in the config_vpn_pptp function
6.5
CVE-2024-27568
LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the apn_name_3g parameter in the setupEC20Apn function
6.5
CVE-2024-27569
LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the init_nvram function