deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-2685
Published: 2022-08-05
Description: A vulnerability was found in SourceCodester Interview Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /addQuestion.php. The manipulation of the argument question with the input <script>alert(1)</script> leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-205673 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/anx0ing/CVE_demo/blob/main/2022/Interview%20Management%20System-XSS.md; https://github.com/anx0ing/CVE_demo/blob/main/2022/Interview%20Management%20System-XSS.md#interview-management-system-xss; https://vuldb.com/?id.205673
CVE: CVE-2022-31609
Published: 2022-08-05
Description: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows the guest VM to allocate resources for which the guest is not authorized. This vulnerability may lead to loss of data integrity and confidentiality, denial of service, or information disclosure.
CVSS Score: 7.8 (HIGH)
CWE: CWE-285
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5383; https://nvidia.custhelp.com/app/answers/detail/a_id/5383
CVE: CVE-2022-31614
Published: 2022-08-05
Description: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where it may double-free some resources. An attacker may exploit this vulnerability with other vulnerabilities to cause denial of service, code execution, and information disclosure.
CVSS Score: 7.0 (HIGH)
CWE: CWE-415, CWE-415
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5383; https://nvidia.custhelp.com/app/answers/detail/a_id/5383
CVE: CVE-2022-31618
Published: 2022-08-05
Description: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a null pointer, which may lead to denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5383; https://nvidia.custhelp.com/app/answers/detail/a_id/5383
CVE: CVE-2022-35162
Published: 2022-08-05
Description: Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the CATEGORY parameter at /category/controller.php?action=edit.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/xysasa/bug_report/blob/main/vendors/campcodes.com/online-job-search-system/XSS.md; https://github.com/xysasa/bug_report/blob/main/vendors/campcodes.com/online-job-search-system/XSS.md
CVE: CVE-2022-35163
Published: 2022-08-05
Description: Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the U_NAME parameter at /category/controller.php?action=edit.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/chen-liyu/bug_report/blob/main/vendors/campcodes.com/online-job-search-system/XSS.md; https://github.com/chen-liyu/bug_report/blob/main/vendors/campcodes.com/online-job-search-system/XSS.md
CVE: CVE-2022-37450
Published: 2022-08-05
Description: Go Ethereum (aka geth) through 1.10.21 allows attackers to increase rewards by mining blocks in certain situations, and using a manipulation of time-difference values to achieve replacement of main-chain blocks, aka Riskless Uncle Making (RUM), as exploited in the wild in 2020 through 2022.
CVSS Score: 5.9 (MEDIUM)
References: http://dx.doi.org/10.13140/RG.2.2.27813.99043; https://github.com/ethereum/go-ethereum/blob/671094279e8d27f4b4c3c94bf8b636c26b473976/core/forkchoice.go#L91-L94; https://medium.com/%40aviv.yaish/uncle-maker-time-stamping-out-the-competition-in-ethereum-d27c1cb62fef
CVE: CVE-2022-21178
Published: 2022-08-05
Description: An os command injection vulnerability exists in the confsrv ucloud_add_new_node functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a malicious packet to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1457; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1457
CVE: CVE-2022-21201
Published: 2022-08-05
Description: A stack-based buffer overflow vulnerability exists in the confers ucloud_add_node_new functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1456; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1456
CVE: CVE-2022-22140
Published: 2022-08-05
Description: An os command injection vulnerability exists in the confsrv ucloud_add_node functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a malicious packet to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1458; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1458
CVE: CVE-2022-22144
Published: 2022-08-05
Description: A hard-coded password vulnerability exists in the libcommonprod.so prod_change_root_passwd functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. During system startup this functionality is always called, leading to a known root password. An attacker does not have to do anything to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-259, CWE-798
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1459; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1459
CVE: CVE-2022-23103
Published: 2022-08-05
Description: A stack-based buffer overflow vulnerability exists in the confsrv confctl_set_app_language functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1462; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1462
CVE: CVE-2022-23399
Published: 2022-08-05
Description: A stack-based buffer overflow vulnerability exists in the confsrv set_port_fwd_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1454; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1454
CVE: CVE-2022-23918
Published: 2022-08-05
Description: A stack-based buffer overflow vulnerability exists in the confsrv set_mf_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability leverages the ethAddr field within the protobuf message to cause a buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1455; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1455
CVE: CVE-2022-23919
Published: 2022-08-05
Description: A stack-based buffer overflow vulnerability exists in the confsrv set_mf_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability leverages the name field within the protobuf message to cause a buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1455; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1455
CVE: CVE-2022-24005
Published: 2022-08-05
Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the ap_steer binary.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE: CVE-2022-24006
Published: 2022-08-05
Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the arpbrocast binary.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE: CVE-2022-24007
Published: 2022-08-05
Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the cfm binary.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE: CVE-2022-24008
Published: 2022-08-05
Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the confcli binary.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE: CVE-2022-24009
Published: 2022-08-05
Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the confsrv binary.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE: CVE-2022-24010
Published: 2022-08-05
Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the cwmpd binary.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE: CVE-2022-24011
Published: 2022-08-05
Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the device_list binary.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE: CVE-2022-24012
Published: 2022-08-05
Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the fota binary.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE: CVE-2022-24013
Published: 2022-08-05
Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the gpio_ctrl binary.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE: CVE-2022-24014
Published: 2022-08-05
Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the logserver binary.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE: CVE-2022-24015
Published: 2022-08-05
Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the log_upload binary.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE: CVE-2022-24016
Published: 2022-08-05
Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the mesh_status_check binary.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE: CVE-2022-24017
Published: 2022-08-05
Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the miniupnpd binary.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE: CVE-2022-24018
Published: 2022-08-05
Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the multiWAN binary.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE: CVE-2022-24019
Published: 2022-08-05
Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the netctrl binary.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE: CVE-2022-24020
Published: 2022-08-05
Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the network_check binary.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE: CVE-2022-24021
Published: 2022-08-05
Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the online_process binary.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE: CVE-2022-24022
Published: 2022-08-05
Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the pannn binary.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE: CVE-2022-24023
Published: 2022-08-05
Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the pppd binary.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE: CVE-2022-24024
Published: 2022-08-05
Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the rtk_ate binary.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE: CVE-2022-24025
Published: 2022-08-05
Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the sntp binary.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE: CVE-2022-24026
Published: 2022-08-05
Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the telnet_ate_monitor binary.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE: CVE-2022-24027
Published: 2022-08-05
Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the libcommon.so binary.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE: CVE-2022-24028
Published: 2022-08-05
Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the libcommonprod.so binary.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE: CVE-2022-24029
Published: 2022-08-05
Description: A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the rp-pppoe.so binary.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1463
CVE: CVE-2022-25996
Published: 2022-08-05
Description: A stack-based buffer overflow vulnerability exists in the confsrv addTimeGroup functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1482; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1482