CVE-2025-29570: Szlbt Lbt-t300-t400 Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

An issue in Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 allows a local attacker to escalate privileges via the function tftp_image_check of a binary named rc.

Affected products

• Szlbt Lbt-t300-t400 Firmware: version 3.2 only

Published 2025-04-03. Last modified 2026-06-17.