A buffer overflow vulnerability exists in Shenzhen Libituo Technology LBT-T300-HW1 devices up to version 1.2.8 in the Web Management Interface's start_single_service function. The flaw is triggered by manipulating the vpn_pptp_server or vpn_l2tp_server arguments remotely. The vendor has not responded to disclosure attempts, and no patch information is available.