CVE-2022-24026 is a critical buffer overflow vulnerability affecting the GetValue functionality within the telnet_ate_monitor binary of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14 devices. An unauthenticated attacker can exploit this by crafting a malicious configuration value, leading to a CVSS v3.1 score of 9.8 (Critical) due to complete compromise of confidentiality, integrity, and availability. There is no known public exploit code or active exploitation, but the vulnerability has garnered significant community discussion, indicating potential interest.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
ms1g_00_01.00_14CPE matchmatch criteria | cpe:2.3:o:tcl:linkhub_mesh_wifi_ac1200:ms1g_00_01.00_14:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.