CVE-2022-24027CWE-120

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14

Critical · published August 5, 2022

CVSS v3.0
9.6
EPSS
1%
Percentile
70.3
In the wild
Unconfirmed
What it is

🔥 A specially-crafted configuration value can unleash a buffer overflow in TCL LinkHub Mesh Wi-Fi, putting your network at serious risk! ⚠️ Think of this vulnerability like a tiny overstuffed suitcase: once you add that extra pair of shoes, it bursts open, spilling everything out! An attacker can exploit this by cleverly altering configuration values to trigger the overflow, potentially gaining control over system operations. If exploited, an attacker could gain unauthorized access, manipulate network settings, or even crash your entire device! Imagine having your Wi-Fi network hijacked, leading to devastating disruptions and threats to your data security.

Put simply

Think of this vulnerability like a tiny overstuffed suitcase: once you add that extra pair of shoes, it bursts open, spilling everything out! An attacker can exploit this by cleverly altering configuration values to trigger the overflow, potentially gaining control over system operations. This buffer overflow vulnerability in the GetValue functionality of TCL LinkHub allows attackers to modify configuration values, leading to memory corruption in the libcommon.so binary. This type of vulnerability can be particularly damaging if successfully exploited.

What to do

If exploited, an attacker could gain unauthorized access, manipulate network settings, or even crash your entire device! Imagine having your Wi-Fi network hijacked, leading to devastating disruptions and threats to your data security. To protect your system, update your TCL LinkHub to the latest firmware version as soon as possible. Regularly audit configuration values and consider implementing additional security measures to monitor and restrict changes. You've got this! Take action now, and you'll keep your Wi-Fi network safe and sound! 🛡️

The record
Technical detail
CVSS v3.0
9.6 · CRITICAL
Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01305 · 70.3th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2022-08-05T21:17Z
EPSS history
Timeline
  • 05 AUG 21:17Z
    A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14
    cvelistv5