Buffer Overflow Vulnerability in TCL LinkHub Mesh Wi-Fi Device
CVE-2022-24021

9.6CRITICAL

Key Information:

Vendor

Tcl

Status
Linkhub Mesh Wifi
Vendor
CVE Published:
5 August 2022

What is CVE-2022-24021?

A buffer overflow vulnerability exists in the GetValue functionality of the TCL LinkHub Mesh Wi-Fi device. By sending a specially-crafted configuration value, an attacker can exploit this design flaw, leading to a potential compromise of the device. This issue affects all occurrences of the buffer overflow vulnerability in the online_process binary, enabling malicious configurations that could undermine device integrity and security.

Affected Version(s)

LinkHub Mesh Wifi MS1G_00_01.00_14

References

https://talosintelligence.com/vulnerability_reports/TALOS...
x_refsource_MISC

CVSS V3.1

Score:
9.6
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

CVSS V3.0

Score:
9.6
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.