CVE-2022-27630
Assigner: talos
Published: 2022-08-01T00:00:00
State: PUBLISHED
affected: product: LinkHub Mesh Wifi
vendor: TCL
versions: status: affected
version: MS1G_00_01.00_14
datePublic: 2022-08-01T00:00:00
descriptions: value: An information disclosure vulnerability exists in the confctl_get_master_wlan functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to information disclosure. An attacker can send packets to trigger this vulnerability.
metrics: cvssV3_0: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.0
problemTypes: descriptions: cweId: CWE-200
description: CWE-200: Information Exposure
type: CWE