CVE-2022-23918

A stack-based buffer overflow vulnerability exists in the confsrv set_mf_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability leverages the ethAddr field within the protobuf message to cause a buffer overflow.

Score

CVSS 3.1 9.8 Critical

Status

Modified - talos-cna@cisco.com

Published

2022-08-05

Last modified

2025-04-15

Weaknesses

CWE-121, CWE-787

Affected products

• Linkhub Mesh Wifi (Tcl)
• Linkhub Mesh Wifi Ac1200 (Tcl)

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1455