CVE-2022-27630

CVE-2022-27630 affects TCL LinkHub Mesh Wi‑Fi MS1G_00_01.00_14. TALOS-2022-1504 discloses a vulnerability in confctl_get_master_wlan where a protobuf-based API (via port 9003) can retrieve the wlan_cfg data, and the response can include SSID and plaintext passwords. The code path shows no proper ...

CVE-2022-27630

An information disclosure vulnerability exists in the confctlgetmasterwlan functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted network packet can lead to information disclosure. An attacker can send packets to trigger this vulnerability...

CVE-2022-27178

A denial of service vulnerability exists in the confctlsetwancfg functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted network packet can lead to denial of service. An attacker can send packets to trigger this vulnerability...

CVE-2022-27178

CVE-2022-27178 affects TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. The TALOS report TALOS-2022-1506 documents a denial-of-service vulnerability in the confctl_set_wan_cfg handling of Protobuffer messages. The vulnerability arises during protobuf deserialization of WanCfg/WanPortCfg data, where the a...

CVE-2022-26346

A denial of service vulnerability exists in the uclouddelnode functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted network packet can lead to denial of service. An attacker can send packets to trigger this vulnerability...

CVE-2022-26346

A denial of service vulnerability exists in the uclouddelnode functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted network packet can lead to denial of service. An attacker can send packets to trigger this vulnerability...

CVE-2022-26346

The CVE-2022-26346 issue affects TCL LinkHub Mesh Wi‑Fi MS1G_00_01.00_14. Talos/TALOS-2022-1507 describes a denial-of-service arising from how the device processes ProtoBuffer messages over port 9003 in the ucloud_del_node path. Specifically, MxpManageList data is parsed in the confsrv handler, w...

CVE-2022-26342

Summary: CVE-2022-26342 applies to TCL LinkHub Mesh Wi‑Fi, specifically the MSP LinkHub Mesh node software. Talos documents a buffer overflow in the confsrv ucloud_set_node_location handler. The vulnerability arises from a dangerous strcpy in the path that handles the NodeLocation message (via pr...

CVE-2022-26342

A buffer overflow vulnerability exists in the confsrv ucloudsetnodelocation functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

CVE-2022-26009

TALOS-2022-1483 documents CVE-2022-26009 affecting TCL LinkHub Mesh Wi‑Fi MS1G_00_01.00_14. The vulnerability is a stack-based buffer overflow in confsrv ucloud_set_node_location. During processing of a NodeLocation protobuf, the code performs an inbound sprintf without validating destination buf...

CVE-2022-26009

A stack-based buffer overflow vulnerability exists in the confsrv ucloudsetnodelocation functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

CVE-2022-25996

A stack-based buffer overflow vulnerability exists in the confsrv addTimeGroup functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

CVE-2022-25996

CVE-2022-25996 affects TCL LinkHub Mesh Wi‑Fi MS1G_00_01.00_14. Talos report TALOS-2022-1482 describes a stack-based buffer overflow in addTimeGroup invoked from the TimeGroup/TimeRule protobuf handling. Specifically, when a TimeRule.week field is populated, a strcpy into a stack buffer occurs wi...

CVE-2022-25996

A stack-based buffer overflow vulnerability exists in the confsrv addTimeGroup functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

CVE-2022-24029

The TCL LinkHub Mesh Wi‑Fi GetValue buffer overflow (CVE-2022-24029) stems from GetValue not accounting for the destination buffer size when copying flash configuration data. Talos details show GetValue is a wrapper around cfms_mib_proc_handle with a fixed 4-byte message path, and GetValue ultima...

CVE-2022-24028

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all...

CVE-2022-24028

CVE-2022-24028 affects TCL LinkHub Mesh Wi‑Fi MS1G_00_01.00_14. The root cause is a buffer-overflow in the GetValue path within libcommonprod.so: GetValue invokes cfms_mib_proc_handle with a small destination buffer and, via GetCfmValue/GetValue/CFMS plumbing, can copy more data than the stack bu...

CVE-2022-24027

CVE-2022-24027 affects TCL LinkHub Mesh Wi‑Fi MS1G_00_01.00_14, rooted in a buffer overflow in the GetValue path of the shared library libcommon.so. The vulnerability arises because GetValue ultimately calls cfms_mib_proc_handle with a small destination buffer, while the GetValue/Reveal flow can ...

CVE-2022-24027

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all...

CVE-2022-24026

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all...