CVE-2022-26346CWE-284

A denial of service vulnerability exists in the ucloud_del_node functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14

Critical · published August 5, 2022

CVSS v3.0
9.6
EPSS
1%
Percentile
69.2
In the wild
Unconfirmed
What it is

🚨 This TCL LinkHub MS1G Wi-Fi vulnerability is a game-changer, allowing a crafted network packet to crank out a denial of service like a broken faucet flooding your home! 🔥 Think of it like a restaurant where one angry customer keeps sending back their food over and over again, preventing anyone else from enjoying a meal. That’s how an attacker can keep sending these packets to the Wi-Fi, bringing your entire network to a halt! The potential aftermath? An attacker can render your Wi-Fi completely useless, disrupting not just your browsing but potentially halting all connected devices, from smart home systems to work-from-home setups. It's absolutely devastating to be cut off when you rely on that connectivity for everything!

Put simply

Think of it like a restaurant where one angry customer keeps sending back their food over and over again, preventing anyone else from enjoying a meal. That’s how an attacker can keep sending these packets to the Wi-Fi, bringing your entire network to a halt! This vulnerability in the TCL LinkHub Mesh Wi-Fi's ucloud_del_node functionality allows an attacker to send specially-crafted packets that trigger a denial of service, preventing legitimate devices from connecting properly.

What to do

The potential aftermath? An attacker can render your Wi-Fi completely useless, disrupting not just your browsing but potentially halting all connected devices, from smart home systems to work-from-home setups. It's absolutely devastating to be cut off when you rely on that connectivity for everything! To safeguard yourself, consider patching your device to the latest firmware version immediately. Regularly monitor your network for unusual packet activity and implement traffic filtering where possible. 🛡️ You've got this! With these steps, you’ll be reinforcing your network like a security pro! 💪🚀

The record
Technical detail
CVSS v3.0
9.6 · CRITICAL
Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01251 · 69.2th percentile
Weakness
CWE-284 · Improper Access Control
Published
2022-08-05T21:18Z
EPSS history
Timeline
  • 05 AUG 21:18Z
    A denial of service vulnerability exists in the ucloud_del_node functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14
    cvelistv5