{ "id": "CVE-2024-27570", "sourceIdentifier": "cve@mitre.org", "published": "2024-03-01T14:15:54.247", "lastModified": "2024-03-01T15:23:36.177", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the generate_conf_router function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request." }, { "lang": "es", "value": "Se descubri\u00f3 que LBT T300-T390 v2.2.1.8 conten\u00eda un desbordamiento de b\u00fafer en la regi\u00f3n stack de la memoria a trav\u00e9s del par\u00e1metro ApCliSsid en la funci\u00f3n generate_conf_router. Esta vulnerabilidad permite a los atacantes provocar una denegaci\u00f3n de servicio (DoS) mediante una solicitud POST manipulada." } ], "metrics": {}, "references": [ { "url": "https://github.com/cvdyfbwa/IoT_LBT_Router/blob/main/generate_conf_router.md", "source": "cve@mitre.org" } ] }