Tcl vulnerabilities

52 vulnerabilities

Known vulnerabilities in Tcl products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 15 products.

Products

15
PrioritiseCVE-2025-55972tcl · 65c655_firmwaretcl 65c655_firmwareA TCL Smart TV running a vulnerable UPnP/DLNA MediaRenderer implementation is affected by a remote, unauthenticated Denial of Service (DoS) condition. By sending a flood of malformed or oversized SetAVTransportURI SOAP requests to the UPnP control endpoint, an attacker can cause the device to become unresponsive. This denial persists as long as the attack continues and affects all forms of TV operation. Manual user control and even reboots do not restore functionality unless the flood stops.CVSS7.5HighEPSS0.54%RoutineCVE-2025-55971tcl · 65c655_firmwaretcl 65c655_firmwareTCL 65C655 Smart TV, running firmware version V8-R75PT01-LF1V269.001116 (Android TV, Kernel 5.4.242+), is vulnerable to a blind, unauthenticated Server-Side Request Forgery (SSRF) vulnerability via the UPnP MediaRenderer service (AVTransport:1). The device accepts unauthenticated SetAVTransportURI SOAP requests over TCP/16398 and attempts to retrieve externally referenced URIs, including attacker-controlled payloads. The blind SSRF allows for sending requests on behalf of the TV, which can be leveraged to probe for other internal or external services accessible by the device (e.g., 127.0.0.1:16XXX, LAN services, or internet targets), potentially enabling additional exploit chains.CVSS4.7MediumEPSS0.30%RoutineCVE-2024-11136tcl · cameraArbitrary file removal via path traversal in TCL CameraThe default TCL Camera application exposes a provider vulnerable to path traversal vulnerability. Malicious application can supply malicious URI path and delete arbitrary files from user’s external storage.CVSS8.2HighEPSS0.25%PrioritiseCVE-2023-43481tcl · browser_tv_web_-_browseheretcl browser_tv_web_-_browsehereAn issue in Shenzhen TCL Browser TV Web BrowseHere (aka com.tcl.browser) 6.65.022_dab24cc6_231221_gp allows a remote attacker to execute arbitrary JavaScript code via the com.tcl.browser.portal.browse.activity.BrowsePageActivity component.CVSS9.8CriticalEPSS1.06%PrioritiseCVE-2022-27660tcl · linkhub mesh wifi +1 moretcl linkhub mesh wifiA denial of service vulnerability exists in the confctl_set_guest_wlan functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to denial of service. An attacker can send packets to trigger this vulnerability.CVSS9.3CriticalEPSS1.06%RoutineCVE-2022-27633tcl · linkhub mesh wifi +1 moretcl linkhub mesh wifiAn information disclosure vulnerability exists in the confctl_get_guest_wlan functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network packet can lead to information disclosure. An attacker can send packets to trigger this vulnerability.CVSS7.5HighEPSS0.94%RoutineCVE-2022-27630tcl · linkhub mesh wifi +1 moretcl linkhub mesh wifiAn information disclosure vulnerability exists in the confctl_get_master_wlan functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to information disclosure. An attacker can send packets to trigger this vulnerability.CVSS7.5HighEPSS0.94%PrioritiseCVE-2022-27185tcl · linkhub mesh wifi +1 moretcl linkhub mesh wifiA denial of service vulnerability exists in the confctl_set_master_wlan functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network packet can lead to denial of service. An attacker can send packets to trigger this vulnerability.CVSS9.3CriticalEPSS1.06%PrioritiseCVE-2022-27178tcl · linkhub mesh wifi +1 moretcl linkhub mesh wifiA denial of service vulnerability exists in the confctl_set_wan_cfg functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to denial of service. An attacker can send packets to trigger this vulnerability.CVSS9.8CriticalEPSS1.20%PrioritiseCVE-2022-26346tcl · linkhub mesh wifi +1 moretcl linkhub mesh wifiA denial of service vulnerability exists in the ucloud_del_node functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to denial of service. An attacker can send packets to trigger this vulnerability.CVSS9.8CriticalEPSS1.25%PrioritiseCVE-2022-26342tcl · linkhub mesh wifi +1 moretcl linkhub mesh wifiA buffer overflow vulnerability exists in the confsrv ucloud_set_node_location functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.CVSS9.8CriticalEPSS1.27%PrioritiseCVE-2022-26009tcl · linkhub mesh wifi +1 moretcl linkhub mesh wifiA stack-based buffer overflow vulnerability exists in the confsrv ucloud_set_node_location functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.CVSS9.8CriticalEPSS1.31%PrioritiseCVE-2022-25996tcl · linkhub mesh wifi +1 moretcl linkhub mesh wifiA stack-based buffer overflow vulnerability exists in the confsrv addTimeGroup functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.CVSS9.8CriticalEPSS1.27%PrioritiseCVE-2022-24029tcl · linkhub mesh wifi +1 moretcl linkhub mesh wifiA buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the rp-pppoe.so binary.CVSS9.8CriticalEPSS1.31%PrioritiseCVE-2022-24028tcl · linkhub mesh wifi +1 moretcl linkhub mesh wifiA buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the libcommonprod.so binary.CVSS9.8CriticalEPSS1.31%PrioritiseCVE-2022-24027tcl · linkhub mesh wifi +1 moretcl linkhub mesh wifiA buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the libcommon.so binary.CVSS9.8CriticalEPSS1.31%PrioritiseCVE-2022-24026tcl · linkhub mesh wifi +1 moretcl linkhub mesh wifiA buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the telnet_ate_monitor binary.CVSS9.8CriticalEPSS1.31%PrioritiseCVE-2022-24025tcl · linkhub mesh wifi +1 moretcl linkhub mesh wifiA buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the sntp binary.CVSS9.8CriticalEPSS1.31%PrioritiseCVE-2022-24024tcl · linkhub mesh wifi +1 moretcl linkhub mesh wifiA buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the rtk_ate binary.CVSS9.8CriticalEPSS1.31%PrioritiseCVE-2022-24023tcl · linkhub mesh wifi +1 moretcl linkhub mesh wifiA buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all occurances of the buffer overflow vulnerability within the pppd binary.CVSS9.6CriticalEPSS0.87%