CVE-2022-24007: Buffer Overflow
A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the cfm binary.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-24007?
CVE-2022-24007 has a high severity rating due to the potential for a buffer overflow exploit.
How do I fix CVE-2022-24007?
To fix CVE-2022-24007, update the TCL LinkHub Mesh Wi-Fi software to the latest version that addresses this vulnerability.
Which devices are affected by CVE-2022-24007?
CVE-2022-24007 affects the TCL LinkHub Mesh Wi-Fi model MS1G_00_01.00_14.
What are the potential impacts of exploiting CVE-2022-24007?
Exploiting CVE-2022-24007 could allow an attacker to execute arbitrary code on the affected device through a buffer overflow.
Is there an official patch for CVE-2022-24007?
Yes, TCL has provided an official patch for CVE-2022-24007 in the updated firmware for the affected model.