CVE-2022-27633

An information disclosure vulnerability exists in the confctl_get_guest_wlan functionality of TCL...

6.5 Medium

An information disclosure vulnerability exists in the confctl_get_guest_wlan functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network packet can lead to information disclosure. An attacker can send packets to trigger this vulnerability.

Attack profile

How easy it is to exploit

Attack vector: Adjacent network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: None

Exploit likelihood

0.94%Up 0.1 points since Aug 6, 2022

What each source reports

CVE List Score used 6.5

Record: CVE-2022-27633
CVSS 3.0: 6.5 MediumCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

EUVDEUVD-2022-32134 6.5

Record: EUVD-2022-32134
CVSS 3.0: 6.5 MediumCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

GitHub AdvisoriesGHSA-xjvg-m3fg-m9f8 7.5

An information disclosure vulnerability exists in the confctl_get_guest_wlan functionality of TCL...

Record: GHSA-xjvg-m3fg-m9f8
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

NVD 7.5

Record: CVE-2022-27633
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 3.0: 6.5 MediumCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

Affected products

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-27633 is a medium vulnerability (CVSS 6.5) in Tcl Linkhub Mesh Wifi, published August 5, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.94%, the 61st percentile. No source names a fixed version.