What’s Vulnerable › Vulnerabilities
CVE-2025-8019: Shenzhen Libituo Technology LBT-T300-T310 appy.cgi sub_40B6F0 buffer overflow
- Severity: high (CVSS 8.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.0% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2025-07-22 · updated 2026-06-17
- Weakness: CWE-119
Description
A vulnerability was found in Shenzhen Libituo Technology LBT-T300-T310 2.2.3.6. It has been rated as critical. Affected by this issue is the function sub_40B6F0 of the file at/appy.cgi. The manipulation of the argument wan_proto leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected products
References
- https://github.com/turing-wue/IoT-vul/blob/main/LBT-T300/README.md
- https://github.com/turing-wue/IoT-vul/blob/main/LBT-T300/README.md#payload
- https://vuldb.com/?ctiid.317222
- https://vuldb.com/?id.317222
- https://vuldb.com/?submit.619530
- https://github.com/turing-wue/IoT-vul/blob/main/LBT-T300/README.md
- https://github.com/turing-wue/IoT-vul/blob/main/LBT-T300/README.md#payload
Get alerted when CVE-2025-8019 or the next vulnerability affects your stack