Service interruption via unchecked 3G PIN length
Published Jul 16, 2024 · Updated Dec 6, 2024
Stack overflow in LBT-T300-T400 3.2 allows remote authenticated users to interrupt service through a crafted 3G PIN request. The config_3g_para function accepts the pin_3g_code field from /apply.cgi without restricting its length, causing the stack overflow. The only public request includes HTTP Basic authentication; public evidence does not establish unauthenticated reachability or whether the outcome is a crash, reboot, or code execution.
Summary
What happened
Stack overflow in LBT-T300-T400 3.2 allows remote authenticated users to interrupt service through a crafted 3G PIN request. The config_3g_para function accepts the pin_3g_code field from /apply.cgi without restricting its length, causing the stack overflow. The only public request includes HTTP Basic authentication; public evidence does not establish unauthenticated reachability or whether the outcome is a crash, reboot, or code execution.
The record
- CVE
- CVE-2024-40536
- Published
- Jul 16, 2024
- Updated
- Dec 6, 2024
- Vendor
- Unknown vendor
- Product
- Unknown product
- Classifications
- CWE-120, T1499.004
- Attack vector
- network
- Privileges
- authenticated
Timeline
How it unfolded
- Jul 16, 2024CVE publishedPublication date reported by the CVE source.
- Dec 6, 2024Record updatedLatest update available in the CVE record.
Exploitability
Present is not the same as exploitable
Compare your product and version with the public record. A matching version still requires validation against your environment.
Is a vulnerable build present?
What conditions does exploitation require?
What is affected?
Affected products and versions are unavailable in this record.
Published CVSS scores
CVSS describes severity. EPSS estimates exploitation probability.
Attacks
What attackers are doing with it
Daily unique IPs observed by Shadowserver honeypots for known exploited vulnerabilities (KEVs). Missing observations do not establish an absence of attacks.
Weakness, pattern, technique
Public exploit references
- LBT-T300-T400 buffer-overflow HTTP requestproof of concept · unverified
Labels summarize the accepted research assessment. They do not indicate a test against your environment.
Technologies
Your stack
See the directory against your own environment.
Your stack
Check the software in your environment
Book a demo to see how Hinoki identifies affected software and validates exploitability in your environment.
Book a demo