CVE-2021-46424

CRITICAL NUCLEI

Telesquare TLR-2005KSH 1.0.0 - File Deletion

Title source: llm

Description

Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request.

Exploits (1)

exploitdb WORKING POC

by Ahmed Alroky · textwebappshardware

https://www.exploit-db.com/exploits/50935

View Code ZIP pw:eip

Nuclei Templates (1)

Telesquare TLR-2005KSH 1.0.0 - Arbitrary File Delete

CRITICALVERIFIEDby gy741

Shodan: http.html:"TLR-2005KSH" || http.html:"tlr-2005ksh"

FOFA: body="tlr-2005ksh"

References (2)

[Exploit, Third Party Advisory, VDB Entry] http://packetstormsecurity.com/files/167127/TLR-2005KSH-Arbitrary-File-Delete.html

[Exploit, Third Party Advisory] https://drive.google.com/drive/folders/1_e3eJ8fzhCWnCkoRpbLoyQecuKkPR4OD?usp=sharing

Scores

CVSS v3 9.1

EPSS 0.9147

EPSS Percentile 99.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Details

Status published

Products (1)

telesquare/tlr-2005ksh_firmware 1.0.0

Published Apr 27, 2022

Tracked Since Feb 18, 2026