CVE-2022-24009: Buffer Overflow
A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the confsrv binary.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-24009?
CVE-2022-24009 is classified as a critical severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2022-24009?
To mitigate CVE-2022-24009, update the TCL LinkHub Mesh Wi-Fi to the latest firmware version provided by the vendor.
What systems are affected by CVE-2022-24009?
CVE-2022-24009 affects TCL LinkHub Mesh Wi-Fi devices running the specific firmware version ms1g_00_01.00_14.
Can CVE-2022-24009 be exploited remotely?
Yes, CVE-2022-24009 can be exploited remotely if an attacker can influence the configuration values sent to the device.
What are the consequences of exploiting CVE-2022-24009?
Exploiting CVE-2022-24009 can lead to unauthorized access, potential data breaches, or complete control over the affected device.