CVE-2022-23399

Mode C: The CVE-2022-23399 issue affects TCL LinkHub Mesh Wifi MS1G_00_01.00_14. TALOS-2022-1454 documents a stack-based buffer overflow in confsrv set_port_fwd_rule. A Protobuffer PortFwdList is unpacked and then passed to set_port_fwd_rule; within this function a local 0x80-byte buffer (var_88)...

CVE-2022-23399

A stack-based buffer overflow vulnerability exists in the confsrv setportfwdrule functionality of TCL LinkHub Mesh Wifi MS1G0001.0014. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

CVE-2022-23399

A stack-based buffer overflow vulnerability exists in the confsrv setportfwdrule functionality of TCL LinkHub Mesh Wifi MS1G0001.0014. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...