CVE-2024-29243
CVE-2024-29243: Buffer overflow vulnerability in Shenzhen Libituo LBT-T300-mini v1.2.9. A buffer overflow flaw exists in the /apply.cgi endpoint, specifically through the vpn_client_ip parameter. This vulnerability allows attackers to potentially execute arbitrary code or cause a denial-of-service. While the CVSS score is 0, the SOCRadar Vulnerability Risk Score (SVRS) of 34 indicates a moderate level of risk associated with this CVE. A low CVSS score can be misleading here. Although the SVRS is not critical (above 80), the presence of this buffer overflow in the wild makes it important to address to protect against potential exploitation. Timely patching or mitigation measures are recommended to prevent unauthorized access and system compromise.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.