A critical memory corruption vulnerability in Shenzhen Libituo Technology LBT-T300-T310 devices could allow a remote attacker to execute arbitrary code.

This is a buffer overflow vulnerability (CWE-120) triggered by an unchecked data length in the wan_proto parameter within the start_wan function. While the CVSS vector indicates that low privileges are required (PR:L), the vulnerability is remotely exploitable and leads to total system impact.

The ability to trigger a buffer overflow in network-facing hardware poses a severe risk to organizational infrastructure. Successful exploitation could result in full device compromise, allowing an attacker to intercept traffic, pivot into internal networks, or render the device permanently unusable. Given the high CVSS score of 8.8, this vulnerability must be treated as a priority for remediation.

Immediate Action: As no official patch is currently available, administrators should restrict access to the web management interface of the affected device to trusted management networks only. If the device is not required for critical operations, consider decommissioning or disconnecting it from the network until a vendor firmware update is released.

Proactive Monitoring: Monitor network traffic for anomalous POST requests directed at the apply.cgi endpoint, particularly those containing unusually long string values in the wan_proto parameter.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to inspect and drop incoming HTTP traffic containing excessively long parameters in the wan_proto field.

Public Exploit Available: Yes — a published proof-of-concept exists in the researcher write-up provided via the GitHub repository linked in the CVE references.

Due to the availability of a public proof-of-concept and the potential for total system compromise, this vulnerability presents a significant risk to the integrity of network hardware. Organizations using the LBT-T300-T310 should immediately implement network-level access controls to limit exposure to the management interface. Continuous monitoring for updates from Shenzhen Libituo Technology is essential, and the provided patch should be applied immediately upon release to remediate this critical security flaw.