Exploitation Summary
EIP tracks 1 public exploit for CVE-2021-46419. PoCs published by Momen Eldawakhly. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates an arbitrary file deletion vulnerability in Telesquare TLR-2855KS6 via a malformed HTTP DELETE request to /cgi-bin/test.cgi. The PoC includes a raw HTTP request with specific headers and a cookie, targeting a known endpoint to trigger the vulnerability.
Description
An unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE method can allow deletion of system files and scripts.
Exploits (1)
This exploit demonstrates an arbitrary file deletion vulnerability in Telesquare TLR-2855KS6 via a malformed HTTP DELETE request to /cgi-bin/test.cgi. The PoC includes a raw HTTP request with specific headers and a cookie, targeting a known endpoint to trigger the vulnerability.
Nuclei Templates (1)
title:"Login to TLR-2855KS6" || http.title:"login to tlr-2855ks6"
product=="TELESQUARE-TLR-2855KS6" || title="login to tlr-2855ks6" || product=="telesquare-tlr-2855ks6"
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H