CVE-2022-27178CWE-284

A denial of service vulnerability exists in the confctl_set_wan_cfg functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14

Critical · published August 5, 2022

CVSS v3.0
9.6
EPSS
1%
Percentile
67.9
In the wild
Unconfirmed
What it is

🚨 A single malicious packet could knock your TCL LinkHub Mesh Wi-Fi out of commission! 🔥 Think of it like a traffic jam caused by a rogue car blocking the highway. Just one cleverly crafted network packet can cause a massive denial of service, leaving your internet stuck in gridlock. An attacker could unleash chaos on your network, resulting in complete service outages. Imagine your family struggling with dead Wi-Fi during a movie night or a work-from-home day turned into a nightmare! This critical vulnerability can completely disrupt connectivity.

Put simply

Think of it like a traffic jam caused by a rogue car blocking the highway. Just one cleverly crafted network packet can cause a massive denial of service, leaving your internet stuck in gridlock. This Denial of Service (DoS) vulnerability occurs in the confctl_set_wan_cfg functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14, allowing attackers to send specially-crafted packets to trigger the vulnerability and incapacitate the service.

What to do

An attacker could unleash chaos on your network, resulting in complete service outages. Imagine your family struggling with dead Wi-Fi during a movie night or a work-from-home day turned into a nightmare! This critical vulnerability can completely disrupt connectivity. Immediately apply any available firmware updates to your TCL LinkHub Mesh Wi-Fi device. Ensure that your network is monitored for unusual packet activity and consider implementing firewall rules to filter out suspicious packets. Stay vigilant! You've got this! With a quick update, you can safeguard your network and keep your connection strong. 🛡️

The record
Technical detail
CVSS v3.0
9.6 · CRITICAL
Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01198 · 67.9th percentile
Weakness
CWE-284 · Improper Access Control
Published
2022-08-05T21:19Z
EPSS history
Timeline
  • 05 AUG 21:19Z
    A denial of service vulnerability exists in the confctl_set_wan_cfg functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14
    cvelistv5