high7.5Public exploit code
CVE-2021-46418
An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Telesquare TLR-2855KS6 - Arbitrary File Creation2022-04-11 · webapps · hardware
Impact
An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Telesquare | Tlr-2855ks6 Firmware | All versions |
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/166674/Telesquare-TLR-2855KS6-Arbitrary-File-Creation.html
- https://drive.google.com/drive/folders/1avIfk1MZNmNQYePE1_n4irC24daxCeBA
- http://packetstormsecurity.com/files/166674/Telesquare-TLR-2855KS6-Arbitrary-File-Creation.html
- https://drive.google.com/drive/folders/1avIfk1MZNmNQYePE1_n4irC24daxCeBA