CVE-2021-46418

HIGH NUCLEI

Telesquare TLR-2855KS6 - Info Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2021-46418. PoCs published by Momen Eldawakhly. A Nuclei detection template is also available.

AI-analyzed exploit summary This exploit demonstrates arbitrary file creation on Telesquare TLR-2855KS6 via a PUT request to the CGI endpoint. The PoC shows how an attacker can create a file named 'testing_cve.txt' on the target device.

Description

An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts.

Exploits (1)

exploitdb WORKING POC
by Momen Eldawakhly · textwebappshardware
https://www.exploit-db.com/exploits/50862

This exploit demonstrates arbitrary file creation on Telesquare TLR-2855KS6 via a PUT request to the CGI endpoint. The PoC shows how an attacker can create a file named 'testing_cve.txt' on the target device.

Classification
Working Poc 90%
Attack Type
Other
Complexity
Trivial
Reliability
Reliable
Target: Telesquare TLR-2855KS6
No auth needed
Prerequisites: Network access to the target device
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Nuclei Templates (1)

Telesquare TLR-2855KS6 - Arbitrary File Creation
HIGHVERIFIEDby DhiyaneshDK
FOFA: product=="TELESQUARE-TLR-2855KS6"

References (2)

Core 2
Core References
Exploit, Third Party Advisory x_refsource_misc
https://drive.google.com/drive/folders/1avIfk1MZNmNQYePE1_n4irC24daxCeBA

Scores

CVSS v3 7.5
EPSS 0.2354
EPSS Percentile 97.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Details

Status published
Products (1)
telesquare/tlr-2855ks6_firmware
Published Apr 07, 2022
Tracked Since Feb 18, 2026