Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-23990 State: PUBLISHED Published: 2022-01-26T18:02:02.000Z Last Updated: 2025-05-05T16:24:50.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/libexpat/libexpat/pull/551 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R7FF2UH7MPXKTADYSJUAHI2Y5UHBSHUH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/34NXVL2RZC2YZRV74ZQ3RNFB7WCEUP7D/ - https://www.debian.org/security/2022/d
ge-announce%40lists.fedoraproject.org/message/34NXVL2RZC2YZRV74ZQ3RNFB7WCEUP7D/ - https://www.debian.org/security/2022/dsa-5073 - https://www.oracle.com/security-alerts/cpuapr2022.html - https://www.tenable.com/security/tns-2022-05 - https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf - https://security.gentoo.org/glsa/202209-24
CVE ID: CVE-2022-23992 State: PUBLISHED Published: 2022-02-14T21:04:34 Last Updated: 2024-08-03T03:59:23.325Z Vendors: n/a Products: XCOM Data Transport for Windows, Linux, and UNIX Problem Types: insufficient input validation Description: XCOM Data Transport for Windows, Linux, and UNIX 11.6 releases contain a vulnerability due to insufficient input validation that could potentially allow remote attackers to execute arbitrary commands with elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/XCOM-Data-Transport---Windows-and-XCOM-Data-Transport--Linux--UNI
ent-notification/-/external/content/SecurityAdvisories/XCOM-Data-Transport---Windows-and-XCOM-Data-Transport--Linux--UNIX-Vulnerability-CVE-2022-23992/18750
CVE ID: CVE-2022-23993 State: PUBLISHED Published: 2022-01-26T18:22:26 Last Updated: 2024-08-03T03:59:23.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: /usr/local/www/pkg.php in pfSense CE before 2.6.0 and pfSense Plus before 22.01 uses $_REQUEST['pkg_filter'] in a PHP echo call, causing XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pfsense/pfsense/commit/5d82cce0d615a76b738798577a28a15803e59aeb - https://docs.netgate.com/downloads/pfSense-SA-22_04.webgui.asc
CVE ID: CVE-2022-23994 State: PUBLISHED Published: 2022-02-11T17:40:16 Last Updated: 2024-08-03T03:59:23.288Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Wearable Devices Problem Types: CWE-284 Description: An Improper access control vulnerability in StBedtimeModeReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to change bedtime mode without a proper permission. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2
CVE ID: CVE-2022-23995 State: PUBLISHED Published: 2022-02-11T17:40:16 Last Updated: 2024-08-03T03:59:23.330Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Wearable Devices Problem Types: CWE-284 Description: Unprotected component vulnerability in StBedtimeModeAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to change bedtime mode without a proper permission. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2
CVE ID: CVE-2022-23996 State: PUBLISHED Published: 2022-02-11T17:40:17 Last Updated: 2024-08-03T03:59:23.190Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Wearable Devices Problem Types: CWE-284 Description: Unprotected component vulnerability in StTheaterModeReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to enable bedtime mode without a proper permission. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2
CVE ID: CVE-2022-23997 State: PUBLISHED Published: 2022-02-11T17:40:18 Last Updated: 2024-08-03T03:59:23.316Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Wearable Devices Problem Types: CWE-284 Description: Unprotected component vulnerability in StTheaterModeDurationAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to disable theater mode without a proper permission. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2
CVE ID: CVE-2022-23998 State: PUBLISHED Published: 2022-02-11T17:40:19 Last Updated: 2024-08-03T03:59:23.260Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Camera Problem Types: CWE-20 Description: Improper access control vulnerability in Camera prior to versions 11.1.02.16 in Android R(11), 10.5.03.77 in Android Q(10) and 9.0.6.68 in Android P(9) allows untrusted applications to take a picture in screenlock status. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2
CVE ID: CVE-2022-23999 State: PUBLISHED Published: 2022-02-11T17:40:20 Last Updated: 2024-08-03T03:59:23.363Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: PendingIntent hijacking vulnerability in CpaReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2
CVE ID: CVE-2022-24000 State: PUBLISHED Published: 2022-02-11T17:40:20 Last Updated: 2024-08-03T03:59:23.344Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: PendingIntent hijacking vulnerability in DataUsageReminderReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2
CVE ID: CVE-2022-24001 State: PUBLISHED Published: 2022-02-11T17:40:21 Last Updated: 2024-08-03T03:59:23.365Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-200 Description: Information disclosure vulnerability in Edge Panel prior to Android S(12) allows physical attackers to access screenshot in clipboard via Edge Panel. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2
CVE ID: CVE-2022-24002 State: PUBLISHED Published: 2022-02-11T17:40:22 Last Updated: 2024-08-03T03:59:23.388Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Link sharing Problem Types: CWE-285 Description: Improper Authorization vulnerability in Link Sharing prior to version 12.4.00.3 allows attackers to open protected activity via PreconditionActivity. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2
CVE ID: CVE-2022-24003 State: PUBLISHED Published: 2022-02-11T17:40:23 Last Updated: 2024-08-03T03:59:23.341Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Bixby Vision Problem Types: CWE-200 Description: Exposure of Sensitive Information vulnerability in Bixby Vision prior to version 3.7.50.6 allows attackers to access internal data of Bixby Vision via unprotected intent. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2
CVE ID: CVE-2022-24004 State: PUBLISHED Published: 2022-06-15T18:16:21 Last Updated: 2024-08-03T03:59:23.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross-Site Scripting (XSS) vulnerability was discovered in Messenger/messenger_ajax.php in REDCap 12.0.11. This issue allows any authenticated user to inject arbitrary code into the messenger title (aka new_title) field when editing an existing conversation. The payload executes in the browser of any conversation participant with the sidebar shown. Additional Analyst Notes: - CVE Program Container: References: - https://www.evms.edu/research/resources_services/redcap/redcap_change_log/ - https://labs.nettitude.com/bl
References: - https://www.evms.edu/research/resources_services/redcap/redcap_change_log/ - https://labs.nettitude.com/blog/cve-2022-24004-cve-2022-24127-vanderbilt-redcap-stored-cross-site-scripting/
CVE ID: CVE-2022-24005 State: PUBLISHED Published: 2022-08-05T21:13:00.465Z Last Updated: 2025-04-15T18:57:46.192Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: TCL Products: LinkHub Mesh Wifi Problem Types: CWE-120 Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the ap_steer binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vu
ffer overflow vulnerability within the ap_steer binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE ID: CVE-2022-24006 State: PUBLISHED Published: 2022-08-05T21:13:12.230Z Last Updated: 2025-04-15T18:57:38.496Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: TCL Products: LinkHub Mesh Wifi Problem Types: CWE-120 Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the arpbrocast binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP
ffer overflow vulnerability within the arpbrocast binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE ID: CVE-2022-24007 State: PUBLISHED Published: 2022-08-05T21:13:25.833Z Last Updated: 2025-04-15T18:57:31.188Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: TCL Products: LinkHub Mesh Wifi Problem Types: CWE-120 Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the cfm binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnric
ffer overflow vulnerability within the cfm binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE ID: CVE-2022-24008 State: PUBLISHED Published: 2022-08-05T21:13:42.255Z Last Updated: 2025-04-15T18:57:23.418Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: TCL Products: LinkHub Mesh Wifi Problem Types: CWE-120 Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the confcli binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vul
ffer overflow vulnerability within the confcli binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE ID: CVE-2022-24009 State: PUBLISHED Published: 2022-08-05T21:13:56.075Z Last Updated: 2025-04-15T18:57:14.924Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: TCL Products: LinkHub Mesh Wifi Problem Types: CWE-120 Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the confsrv binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vul
ffer overflow vulnerability within the confsrv binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE ID: CVE-2022-24010 State: PUBLISHED Published: 2022-08-05T21:14:07.835Z Last Updated: 2025-04-15T18:57:07.619Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: TCL Products: LinkHub Mesh Wifi Problem Types: CWE-120 Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the cwmpd binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnr
ffer overflow vulnerability within the cwmpd binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE ID: CVE-2022-24011 State: PUBLISHED Published: 2022-08-05T21:14:17.447Z Last Updated: 2025-04-15T18:56:57.934Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: TCL Products: LinkHub Mesh Wifi Problem Types: CWE-120 Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the device_list binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP
ffer overflow vulnerability within the device_list binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE ID: CVE-2022-24012 State: PUBLISHED Published: 2022-08-05T21:14:28.521Z Last Updated: 2025-04-15T18:56:47.434Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: TCL Products: LinkHub Mesh Wifi Problem Types: CWE-120 Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the fota binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnri
ffer overflow vulnerability within the fota binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE ID: CVE-2022-24013 State: PUBLISHED Published: 2022-08-05T21:14:37.558Z Last Updated: 2025-04-15T18:56:38.338Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: TCL Products: LinkHub Mesh Wifi Problem Types: CWE-120 Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the gpio_ctrl binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP V
ffer overflow vulnerability within the gpio_ctrl binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE ID: CVE-2022-24014 State: PUBLISHED Published: 2022-08-05T21:14:43.695Z Last Updated: 2025-04-15T18:56:28.032Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: TCL Products: LinkHub Mesh Wifi Problem Types: CWE-120 Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the logserver binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP V
ffer overflow vulnerability within the logserver binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE ID: CVE-2022-24015 State: PUBLISHED Published: 2022-08-05T21:14:57.458Z Last Updated: 2025-04-15T18:56:19.950Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: TCL Products: LinkHub Mesh Wifi Problem Types: CWE-120 Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the log_upload binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP
ffer overflow vulnerability within the log_upload binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE ID: CVE-2022-24016 State: PUBLISHED Published: 2022-08-05T21:15:14.962Z Last Updated: 2025-04-15T18:56:12.768Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: TCL Products: LinkHub Mesh Wifi Problem Types: CWE-120 Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the mesh_status_check binary. Additional Analyst Notes: - CVE Program Container: - CI
ffer overflow vulnerability within the mesh_status_check binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE ID: CVE-2022-24017 State: PUBLISHED Published: 2022-08-05T21:15:22.887Z Last Updated: 2025-04-15T18:56:04.799Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: TCL Products: LinkHub Mesh Wifi Problem Types: CWE-120 Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the miniupnpd binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP V
ffer overflow vulnerability within the miniupnpd binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE ID: CVE-2022-24018 State: PUBLISHED Published: 2022-08-05T21:15:35.019Z Last Updated: 2025-04-15T18:55:55.178Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: TCL Products: LinkHub Mesh Wifi Problem Types: CWE-120 Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the multiWAN binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vu
ffer overflow vulnerability within the multiWAN binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE ID: CVE-2022-24019 State: PUBLISHED Published: 2022-08-05T21:15:42.876Z Last Updated: 2025-04-15T18:55:41.522Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: TCL Products: LinkHub Mesh Wifi Problem Types: CWE-120 Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the netctrl binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vul
ffer overflow vulnerability within the netctrl binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE ID: CVE-2022-24020 State: PUBLISHED Published: 2022-08-05T21:15:49.595Z Last Updated: 2025-04-15T18:55:29.552Z Severity: CRITICAL (CVSS 9.6 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: TCL Products: LinkHub Mesh Wifi Problem Types: CWE-120 Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the network_check binary. Additional Analyst Notes: - CVE Program Container: - CISA A
ffer overflow vulnerability within the network_check binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463