CVE-2022-24012: Buffer Overflow
A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the fota binary.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-24012?
The severity of CVE-2022-24012 is rated as high due to its potential for exploitation via a buffer overflow.
How do I fix CVE-2022-24012?
To fix CVE-2022-24012, update the TCL LinkHub Mesh Wi-Fi device to the latest firmware version that addresses this vulnerability.
What type of attack does CVE-2022-24012 enable?
CVE-2022-24012 enables attackers to perform arbitrary code execution through a buffer overflow by modifying configuration values.
Which devices are affected by CVE-2022-24012?
CVE-2022-24012 affects TCL LinkHub Mesh Wi-Fi AC1200 devices running firmware version ms1g_00_01.00_14.
Can CVE-2022-24012 be exploited remotely?
Yes, CVE-2022-24012 can potentially be exploited remotely if an attacker has access to the device's configuration settings.