CVE-2022-23103: Buffer Overflow

Published Aug 5, 2022

Updated

A stack-based buffer overflow vulnerability exists in the confsrv confctlsetapplanguage functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.

Affected Software

2 affected components

Tcl Linkhub Mesh Wifi Ac1200=ms1g_00_01.00_14

Tcl Linkhub Mesh Wifi Ac1200

Event History

Aug 1, 2022

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2022-23103?

CVE-2022-23103 is a stack-based buffer overflow vulnerability in the confsrv confctl_set_app_language functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.

What is the severity of CVE-2022-23103?

The severity of CVE-2022-23103 is critical with a severity rating of 9.8.

Which software versions are affected by CVE-2022-23103?

The affected software version is MS1G_00_01.00_14 of the Tcl Linkhub Mesh Wifi Ac1200.

How does CVE-2022-23103 occur?

CVE-2022-23103 can occur when a specially-crafted network packet triggers a stack-based buffer overflow in the confsrv confctl_set_app_language function of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.

How can CVE-2022-23103 be exploited?

CVE-2022-23103 can be exploited by sending a malicious packet to the device.