CVE-2022-24017

TCL LinkHub Mesh Wi‑Fi MS1G_00_01.00_14 is affected by CVE-2022-24017 due to a buffer overflow in the GetValue functionality (miniupnpd). Talos details show GetValue flows through cfms_mib_proc_handle/GetValue/GetCfmValue; a crafted configuration value can overflow a small destination buffer (0x1...