CVE-2022-24005: Buffer Overflow

Published Aug 5, 2022

Updated

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the apsteer binary.

Affected Software

2 affected components

Tcl Linkhub Mesh Wifi Ac1200=ms1g_00_01.00_14

Tcl Linkhub Mesh Wifi Ac1200

Event History

Aug 5, 2022

CVE Published

via MITRE·09:13 PM

Data Sourced

via MITRE·09:13 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2022-24005?

CVE-2022-24005 has a medium severity due to its potential to cause a buffer overflow in the TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.

How do I fix CVE-2022-24005?

To fix CVE-2022-24005, update the TCL LinkHub Mesh Wi-Fi to the latest firmware version that addresses this vulnerability.

What systems are affected by CVE-2022-24005?

CVE-2022-24005 specifically affects TCL LinkHub Mesh Wi-Fi AC1200 devices running the firmware version MS1G_00_01.00_14.

Can CVE-2022-24005 be exploited remotely?

Yes, CVE-2022-24005 can potentially be exploited remotely if an attacker is able to send specially-crafted configuration values to the device.

What kind of vulnerability is CVE-2022-24005?

CVE-2022-24005 is classified as a buffer overflow vulnerability that can lead to system instability or execution of arbitrary code.