CVE-2024-27567 | LBT T300-T390 2.2.1.8 HTTP POST Request config_vpn_pptp vpn_client_ip stack-based overflow

A vulnerability has been found in LBT T300-T390 2.2.1.8 and classified as critical. Affected by this vulnerability is the function config_vpn_pptp of the component HTTP POST Request Handler. The manipulation of the argument vpn_client_ip leads to stack-based buffer overflow.

This vulnerability is known as CVE-2024-27567. Access to the local network is required for this attack to succeed. There is no exploit available.