CVE-2022-23103CWE-121

A stack-based buffer overflow vulnerability exists in the confsrv confctl_set_app_language functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14

High · published August 5, 2022

CVSS v3.0
8.8
EPSS
1%
Percentile
71.0
In the wild
Unconfirmed
What it is

⚡ A crafty packet is all it takes to create chaos! An attacker can exploit a buffer overflow in TCL LinkHub's functionality, making this vulnerability both sneaky and dangerous. 🔥 Picture a delivery driver who mistakenly keeps delivering extra-large packages to an office designed for small envelopes; the overflow can clutter and crash the entire system! This vulnerability could allow an attacker to send a specially-crafted packet, causing the Wi-Fi device to crash or even execute arbitrary code. The potential for unauthorized access and disruptions is absolutely devastating, putting your network security right on the line.

Put simply

Picture a delivery driver who mistakenly keeps delivering extra-large packages to an office designed for small envelopes; the overflow can clutter and crash the entire system! The stack-based buffer overflow in the confsrv confctl_set_app_language function can be triggered by a malicious network packet, leading to memory corruption and potential execution of arbitrary code.

What to do

This vulnerability could allow an attacker to send a specially-crafted packet, causing the Wi-Fi device to crash or even execute arbitrary code. The potential for unauthorized access and disruptions is absolutely devastating, putting your network security right on the line. To mitigate the risk, it’s essential to update the TCL LinkHub firmware to the latest version as soon as possible. Regularly monitoring and filtering incoming network traffic will also help you stay one step ahead. 🛡️ You’ve got this! By taking action now, you can secure your network and keep those pesky intruders at bay! 🚀

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01337 · 71.0th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2022-08-05T21:12Z
EPSS history
Timeline
  • 05 AUG 21:12Z
    A stack-based buffer overflow vulnerability exists in the confsrv confctl_set_app_language functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14
    cvelistv5