CVE-2022-23399CWE-121

A stack-based buffer overflow vulnerability exists in the confsrv set_port_fwd_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14

High · published August 5, 2022

CVSS v3.0
8.8
EPSS
1%
Percentile
70.3
In the wild
Unconfirmed
What it is

⚡ A crafty buffer overflow is lurking in TCL LinkHub's set_port_fwd_rule, waiting for just the right malicious packet to strike! Think of this like a delivery driver who accidentally leaves a heavy box in the wrong spot – it can cause chaos when someone tries to navigate around it. A specially-crafted packet can overwhelm the system, pushing it over the edge! An attacker could send a rogue packet that triggers this overflow, potentially leading to unauthorized access, system crashes, or even remote code execution! That's quite a nightmare, as it can compromise the entire network setup and any devices linked to it.

Put simply

Think of this like a delivery driver who accidentally leaves a heavy box in the wrong spot – it can cause chaos when someone tries to navigate around it. A specially-crafted packet can overwhelm the system, pushing it over the edge! This stack-based buffer overflow vulnerability occurs within the confsrv set_port_fwd_rule function, allowing attackers to exploit a flaw in how incoming packets are processed, leading to the overflow.

What to do

An attacker could send a rogue packet that triggers this overflow, potentially leading to unauthorized access, system crashes, or even remote code execution! That's quite a nightmare, as it can compromise the entire network setup and any devices linked to it. To safeguard your devices, update to the latest firmware version provided by TCL immediately. Regularly review and monitor your network traffic for any unusual activity, and consider implementing additional firewall rules to mitigate risks. You've got this! Stay vigilant, follow the steps, and your network will be secure and sound! 🛡️

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01305 · 70.3th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2022-08-05T21:12Z
EPSS history
Timeline
  • 05 AUG 21:12Z
    A stack-based buffer overflow vulnerability exists in the confsrv set_port_fwd_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14
    cvelistv5