CVE-2022-23918

Name of the Vulnerable Software and Affected Versions TCL LinkHub Mesh Wifi MS1G 00 01.00 14

Description A stack-based buffer overflow issue exists in the confsrv set mf rule functionality. This can be triggered by a specially-crafted network packet, leading to a stack-based buffer overflow. The vulnerability exploits the ethAddr field within the protobuf message to cause the buffer overflow. An attacker can send a malicious packet to trigger this issue.

Recommendations For TCL LinkHub Mesh Wifi MS1G 00 01.00 14, consider disabling the set mf rule functionality in the confsrv as a temporary workaround until a patch is available. Restrict access to the ethAddr field within the protobuf message to minimize the risk of exploitation.