Tcl vulnerabilities
We track 49 vulnerabilities in Tcl products across 8 products. 49 are rated high or critical, and none are known to be exploited. The most recent was published on October 3, 2025.
Latest Tcl vulnerabilities
- 9.8 Critical severity
LinkHub Mesh Wifi: Buffer Copy without Checking Size of Input
A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.T
- 9.8 Critical severity
LinkHub Mesh Wifi: Out-of-bounds Write
A stack-based buffer overflow vulnerability exists in the confsrv set_mf_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigge
- 9.8 Critical severity
LinkHub Mesh Wifi: Out-of-bounds Write
A stack-based buffer overflow vulnerability exists in the confsrv set_mf_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigge
- 9.8 Critical severity
LinkHub Mesh Wifi: Out-of-bounds Write
A stack-based buffer overflow vulnerability exists in the confsrv set_port_fwd_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to
- 9.8 Critical severity
LinkHub Mesh Wifi: Out-of-bounds Write
A stack-based buffer overflow vulnerability exists in the confsrv confctl_set_app_language functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious pa
- 9.8 Critical severity
LinkHub Mesh Wifi: Use of Hard-coded Credentials
A hard-coded password vulnerability exists in the libcommonprod.so prod_change_root_passwd functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. During system startup this functionality is always called, leading to a known root password. An attacker does n
- 9.8 Critical severity
LinkHub Mesh Wifi: Improper Neutralization of Special Elements used in an OS Command
An os command injection vulnerability exists in the confsrv ucloud_add_node functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a malicious packet to trigger
- 8.8 High severity
LinkHub Mesh Wifi: Out-of-bounds Write
A stack-based buffer overflow vulnerability exists in the confers ucloud_add_node_new functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet
- 9.8 Critical severity
LinkHub Mesh Wifi: Improper Neutralization of Special Elements used in an OS Command
An os command injection vulnerability exists in the confsrv ucloud_add_new_node functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a malicious packet to trig