CVE-2022-24020: Buffer Overflow
A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the networkcheck binary.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-24020?
CVE-2022-24020 is classified as a high severity vulnerability due to the risk of exploitation through a buffer overflow.
How do I fix CVE-2022-24020?
To mitigate CVE-2022-24020, users should update to the latest firmware version of the TCL LinkHub Mesh Wi-Fi device.
What is the impact of CVE-2022-24020?
CVE-2022-24020 can potentially allow remote attackers to execute arbitrary code on the affected device.
What products are affected by CVE-2022-24020?
CVE-2022-24020 affects the TCL LinkHub Mesh Wi-Fi model with firmware version ms1g_00_01.00_14.
Is CVE-2022-24020 easy to exploit?
CVE-2022-24020 may be exploited relatively easily if an attacker can send specially-crafted configuration values to the device.