PT-2022-18538 · Tcl · Tcl Linkhub Mesh Wi-Fi

Carl Hurd · Published 2022-08-05 · Updated 2022-08-09 · CVE-2022-27633

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions TCL LinkHub Mesh Wifi MS1G 00 01.00 14

Description An information disclosure issue exists in the confctl get guest wlan functionality. A specially-crafted network packet can lead to information disclosure. An attacker can send packets to trigger this issue.

Recommendations For TCL LinkHub Mesh Wifi MS1G 00 01.00 14, consider restricting access to the confctl get guest wlan functionality until a patch is available. As a temporary workaround, avoid using the confctl get guest wlan functionality to minimize the risk of exploitation.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2022-27633

Affected Products

Tcl Linkhub Mesh Wi-Fi

References · 4

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2022-1503 · Exploit
• https://osv.dev/vulnerability/CVE-2022-27633 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-27633 · Security Note
• https://t.me/cibsecurity/47664 · Telegram Post