https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-8019.htmlhttps://patchthecve.com/cve/CVE-2025-8019.htmlWed, 17 Jun 2026 10:06:09 +0000HIGH 8.8: A vulnerability was found in Shenzhen Libituo Technology LBT-T300-T310 2.2.3.6. It has been rated as critical. Affected by this issue is the function sub_40B6F0 of the file at/appy.cgi. The manipulation of the argument wan_proto leads to buffer overflow. The attack may be launched remotely. The explhttps://patchthecve.com/cve/CVE-2025-7077.htmlhttps://patchthecve.com/cve/CVE-2025-7077.htmlWed, 17 Jun 2026 10:04:12 +0000HIGH 8.8: A vulnerability classified as critical has been found in Shenzhen Libituo Technology LBT-T300-T310 up to 2.2.3.6. This affects the function config_3g_para of the file /appy.cgi. The manipulation of the argument username_3g/password_3g leads to buffer overflow. It is possible to initiate the attack rhttps://patchthecve.com/cve/CVE-2025-29570.htmlhttps://patchthecve.com/cve/CVE-2025-29570.htmlWed, 17 Jun 2026 09:05:31 +0000HIGH 7.8: An issue in Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 allows a local attacker to escalate privileges via the function tftp_image_check of a binary named rc.https://patchthecve.com/cve/CVE-2024-40536.htmlhttps://patchthecve.com/cve/CVE-2024-40536.htmlWed, 17 Jun 2026 07:46:03 +0000MEDIUM 5.3: Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 were discovered to contain a stack overflow via the pin_3g_code parameter in the config_3g_para function.https://patchthecve.com/cve/CVE-2024-40535.htmlhttps://patchthecve.com/cve/CVE-2024-40535.htmlWed, 17 Jun 2026 07:46:02 +0000CRITICAL 9.8: Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 was discovered to contain a stack overflow via the apn_name_3g parameter in the config_3g_para function.https://patchthecve.com/cve/CVE-2024-39181.htmlhttps://patchthecve.com/cve/CVE-2024-39181.htmlWed, 17 Jun 2026 07:41:30 +0000MEDIUM 6.5: Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 was discovered to contain a buffer overflow via the ApCliSsid parameter in thegenerate_conf_router() function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.https://patchthecve.com/cve/CVE-2024-29244.htmlhttps://patchthecve.com/cve/CVE-2024-29244.htmlWed, 17 Jun 2026 07:22:42 +0000MEDIUM 5.3: Shenzhen Libituo Technology Co., Ltd LBT-T300-mini v1.2.9 was discovered to contain a buffer overflow via the pin_code_3g parameter at /apply.cgi.https://patchthecve.com/cve/CVE-2024-29243.htmlhttps://patchthecve.com/cve/CVE-2024-29243.htmlWed, 17 Jun 2026 07:22:41 +0000CRITICAL 9.8: Shenzhen Libituo Technology Co., Ltd LBT-T300-mini v1.2.9 was discovered to contain a buffer overflow via the vpn_client_ip parameter at /apply.cgi.https://patchthecve.com/cve/CVE-2024-28447.htmlhttps://patchthecve.com/cve/CVE-2024-28447.htmlWed, 17 Jun 2026 07:21:27 +0000MEDIUM 6.5: Shenzhen Libituo Technology Co., Ltd LBT-T300-mini1 v1.2.9 was discovered to contain a buffer overflow via lan_ipaddr parameters at /apply.cgi.https://patchthecve.com/cve/CVE-2024-28446.htmlhttps://patchthecve.com/cve/CVE-2024-28446.htmlWed, 17 Jun 2026 07:21:27 +0000MEDIUM 5.7: Shenzhen Libituo Technology Co., Ltd LBT-T300-mini1 v1.2.9 was discovered to contain a buffer overflow via lan_netmask parameter at /apply.cgi.