CVE-2022-25996

Name of the Vulnerable Software and Affected Versions TCL LinkHub Mesh Wi-Fi MS1G 00 01.00 14

Description A stack-based buffer overflow vulnerability exists in the confsrv addTimeGroup functionality. A specially-crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.

Recommendations For TCL LinkHub Mesh Wi-Fi MS1G 00 01.00 14, as a temporary workaround, consider disabling the confsrv addTimeGroup functionality until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.