CVE-2022-24017CWE-120

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14

Critical · published August 5, 2022

CVSS v3.0
9.6
EPSS
1%
Percentile
70.3
In the wild
Unconfirmed
What it is

🔥 A cleverly crafted configuration value is all it takes to trigger a buffer overflow in TCL LinkHub Mesh Wi-Fi! Say what?! This vulnerability is like a too-full suitcase that bursts open at the seams — an attacker can shove in extra data, causing everything inside to spill out uncontrollably. It's a recipe for chaos! If exploited, an attacker could gain control of critical system functionality, potentially leading to unauthorized access, data manipulation, or complete service disruption. Imagine a Wi-Fi router that's suddenly under the control of a malicious user — it's absolutely devastating!

Put simply

This vulnerability is like a too-full suitcase that bursts open at the seams — an attacker can shove in extra data, causing everything inside to spill out uncontrollably. It's a recipe for chaos! This buffer overflow vulnerability exists in the GetValue functionality of the TCL LinkHub, allowing harmful modifications to configuration values. When too much data is sent, it can overwrite adjacent memory, leading to unpredictable behavior or exploitation of the device.

What to do

If exploited, an attacker could gain control of critical system functionality, potentially leading to unauthorized access, data manipulation, or complete service disruption. Imagine a Wi-Fi router that's suddenly under the control of a malicious user — it's absolutely devastating! To mitigate this risk, immediately update your TCL LinkHub to the latest firmware version. Regularly review configuration values and ensure they adhere to safe practices. Don't forget to monitor for unusual activity! You've got this! By following these steps, you're well on your way to keeping your network secure! 🛡️

The record
Technical detail
CVSS v3.0
9.6 · CRITICAL
Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01305 · 70.3th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2022-08-05T21:15Z
EPSS history
Timeline
  • 05 AUG 21:15Z
    A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14
    cvelistv5