CVE-2024-28446

MEDIUM

LBT-T300-mini1 v1.2.9 - Stack-based Buffer Overflow via lan_netmask Parameter

Title source: llm

Shenzhen Libituo Technology Co., Ltd LBT-T300-mini1 v1.2.9 was discovered to contain a buffer overflow via lan_netmask parameter at /apply.cgi.

Core 1

Core References

Exploit, Third Party Advisory

CVSS v3 5.7

EPSS 0.0051

EPSS Percentile 39.7%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

CWE

CWE-121

Status published

Products (1)

szlbt/lbt-t300-mini1_firmware 1.2.9

Published Mar 19, 2024

Tracked Since Feb 18, 2026