CVE-2022-24008: Buffer Overflow

Published Aug 5, 2022

Updated

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the confcli binary.

Affected Software

2 affected components

Tcl Linkhub Mesh Wifi Ac1200=ms1g_00_01.00_14

Tcl Linkhub Mesh Wifi Ac1200

Event History

Aug 5, 2022

CVE Published

via MITRE·09:13 PM

Data Sourced

via MITRE·09:13 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2022-24008?

CVE-2022-24008 is a buffer overflow vulnerability in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.

How does CVE-2022-24008 work?

CVE-2022-24008 can be triggered by modifying a configuration value in TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14, leading to a buffer overflow.

What is the severity of CVE-2022-24008?

The severity of CVE-2022-24008 is critical with a score of 9.8.

What software is affected by CVE-2022-24008?

TCL LinkHub Mesh Wi-Fi AC1200 with version MS1G_00_01.00_14 is affected by CVE-2022-24008.

How can CVE-2022-24008 be fixed?

To fix CVE-2022-24008, it is recommended to apply the latest software update provided by TCL for LinkHub Mesh Wi-Fi AC1200 MS1G_00_01.00_14.