VYPR

Tcl\/tk

by Tcl Tk

CVEs (60)

  • CVE-2016-2337CriJan 6, 2017
    Ruby Lang
    Ruby
    risk 0.64cvss 9.8epss 0.06

    Type confusion exists in _cancel_eval Ruby's TclTkIp class method. Attacker passing different type of object than String as "retval" argument can cause arbitrary code execution.

  • CVE-2023-38298HigApr 22, 2024
    Tcl Tk
    Tcl\/tk
    risk 0.57cvss 8.8epss 0.00

    Various software builds for the following TCL devices (30Z, A3X, 20XE, 10L) leak the device IMEI to a system property that can be accessed by any local app on the device without any permissions or special privileges. Google restricted third-party apps from directly obtaining…

  • CVE-2023-38292HigApr 22, 2024
    Tcl Tk
    Tcl\/tk
    risk 0.57cvss 8.7epss 0.00

    Certain software builds for the TCL 20XE Android device contain a vulnerable, pre-installed app with a package name of com.tct.gcs.hiddenmenuproxy (versionCode='2', versionName='v11.0.1.0.0201.0') that allows local third-party apps to programmatically perform a factory reset due…

  • CVE-2023-38296HigApr 22, 2024
    Tcl Tk
    Tcl\/tk
    risk 0.52cvss 8.0epss 0.00

    Various software builds for the following TCL 30Z and TCL A3X devices leak the ICCID to a system property that can be accessed by any local app on the device without any permissions or special privileges. Google restricted third-party apps from directly obtaining non-resettable…

  • CVE-2023-38295HigApr 22, 2024
    Tcl Tk
    Tcl\/tk
    risk 0.51cvss 7.8epss 0.00

    Certain software builds for the TCL 30Z and TCL 10 Android devices contain a vulnerable, pre-installed app that relies on a missing permission that provides no protection at runtime. The missing permission is required as an access permission by components in various…

  • CVE-2023-38291HigApr 22, 2024
    Motorola
    Moto G Pure
    risk 0.46cvss 7.1epss 0.00

    An issue was discovered in a third-party component related to ro.boot.wifimacaddr, shipped on devices from multiple device manufacturers. Various software builds for the following TCL devices (30Z and 10L) and Motorola devices (Moto G Pure and Moto G Power) leak the Wi-Fi MAC…

  • CVE-2025-55971Oct 3, 2025
    Tcl Tk
    Tcl\/tk
    risk 0.00cvss —epss 0.00

    TCL 65C655 Smart TV, running firmware version V8-R75PT01-LF1V269.001116 (Android TV, Kernel 5.4.242+), is vulnerable to a blind, unauthenticated Server-Side Request Forgery (SSRF) vulnerability via the UPnP MediaRenderer service (AVTransport:1). The device accepts…

  • CVE-2023-43481Dec 27, 2023
    Tcl Tk
    Tcl\/tk
    risk 0.00cvss —epss 0.01

    An issue in Shenzhen TCL Browser TV Web BrowseHere (aka com.tcl.browser) 6.65.022_dab24cc6_231221_gp allows a remote attacker to execute arbitrary JavaScript code via the com.tcl.browser.portal.browse.activity.BrowsePageActivity component.

  • CVE-2022-27660Aug 5, 2022
    Tcl Tk
    Tcl\/tk
    risk 0.00cvss —epss 0.01

    A denial of service vulnerability exists in the confctl_set_guest_wlan functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to denial of service. An attacker can send packets to trigger this vulnerability.

  • CVE-2022-27633Aug 5, 2022
    Tcl Tk
    Tcl\/tk
    risk 0.00cvss —epss 0.01

    An information disclosure vulnerability exists in the confctl_get_guest_wlan functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network packet can lead to information disclosure. An attacker can send packets to trigger this vulnerability.

  • CVE-2022-27630Aug 5, 2022
    Tcl Tk
    Tcl\/tk
    risk 0.00cvss —epss 0.01

    An information disclosure vulnerability exists in the confctl_get_master_wlan functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to information disclosure. An attacker can send packets to trigger this vulnerability.

  • CVE-2022-27185Aug 5, 2022
    Tcl Tk
    Tcl\/tk
    risk 0.00cvss —epss 0.01

    A denial of service vulnerability exists in the confctl_set_master_wlan functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network packet can lead to denial of service. An attacker can send packets to trigger this vulnerability.

  • CVE-2022-27178Aug 5, 2022
    Tcl Tk
    Tcl\/tk
    risk 0.00cvss —epss 0.01

    A denial of service vulnerability exists in the confctl_set_wan_cfg functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to denial of service. An attacker can send packets to trigger this vulnerability.

  • CVE-2022-26346Aug 5, 2022
    Tcl Tk
    Tcl\/tk
    risk 0.00cvss —epss 0.01

    A denial of service vulnerability exists in the ucloud_del_node functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to denial of service. An attacker can send packets to trigger this vulnerability.

  • CVE-2022-26342Aug 5, 2022
    Tcl Tk
    Tcl\/tk
    risk 0.00cvss —epss 0.01

    A buffer overflow vulnerability exists in the confsrv ucloud_set_node_location functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.

  • CVE-2022-26009Aug 5, 2022
    Tcl Tk
    Tcl\/tk
    risk 0.00cvss —epss 0.01

    A stack-based buffer overflow vulnerability exists in the confsrv ucloud_set_node_location functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigger…

  • CVE-2022-25996Aug 5, 2022
    Tcl Tk
    Tcl\/tk
    risk 0.00cvss —epss 0.01

    A stack-based buffer overflow vulnerability exists in the confsrv addTimeGroup functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.

  • CVE-2022-24029Aug 5, 2022
    Tcl Tk
    Tcl\/tk
    risk 0.00cvss —epss 0.01

    A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability…

  • CVE-2022-24028Aug 5, 2022
    Tcl Tk
    Tcl\/tk
    risk 0.00cvss —epss 0.01

    A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability…

  • CVE-2022-24027Aug 5, 2022
    Tcl Tk
    Tcl\/tk
    risk 0.00cvss —epss 0.01

    A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability…

Page 1 of 3