Buffer Overflow Vulnerability in TCL LinkHub Mesh Wi-Fi
CVE-2022-24016

9.6CRITICAL

Key Information:

Vendor

Tcl

Status
Linkhub Mesh Wifi
Vendor
CVE Published:
5 August 2022

What is CVE-2022-24016?

A buffer overflow vulnerability resides in the GetValue functionality of TCL LinkHub Mesh Wi-Fi firmware, specifically in version MS1G_00_01.00_14. An attacker can exploit this flaw by providing a specially-crafted configuration value, resulting in a potential buffer overflow. This issue affects all occurrences within the mesh_status_check binary, allowing malicious inputs to manipulate device behavior and compromise network integrity.

Affected Version(s)

LinkHub Mesh Wifi MS1G_00_01.00_14

References

https://talosintelligence.com/vulnerability_reports/TALOS...
x_refsource_MISC

CVSS V3.1

Score:
9.6
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

CVSS V3.0

Score:
9.6
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.