Shenzhen Libituo Technology Lbt-T300-T310 vulnerabilities

CVE-2025-7077 [HIGH] CWE-119 CVE-2025-7077: A vulnerability classified as critical has been found in Shenzhen Libituo Technology LBT-T300-T310 u A vulnerability classified as critical has been found in Shenzhen Libituo Technology LBT-T300-T310 up to 2.2.3.6. This affects the function config_3g_para of the file /appy.cgi. The manipulation of the argument username_3g/password_3g leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public a

CVE-2025-8019 [HIGH] CWE-119 CVE-2025-8019: A vulnerability was found in Shenzhen Libituo Technology LBT-T300-T310 2.2.3.6. It has been rated as A vulnerability was found in Shenzhen Libituo Technology LBT-T300-T310 2.2.3.6. It has been rated as critical. Affected by this issue is the function sub_40B6F0 of the file at/appy.cgi. The manipulation of the argument wan_proto leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.