Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute OS commands without any authentication.
Search vulnerabilities
CVE-2021-46422
CVSS 3.1 · 9.8 Critical
EPSS 94.4%
KEV · Not listed
Vendors
Products
CVE-2021-46419
An unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE method can allow deletion of system files and scripts.
CVSS 3.1 · 9.1 Critical
EPSS 71.4%
KEV · Not listed
Vendors
Products
CVE-2021-46418
An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts.
CVSS 3.1 · 7.5 High
EPSS 23.9%
KEV · Not listed
Vendors
Products
CVE-2021-45428
TLR-2005KSH is affected by an incorrect access control vulnerability. THe PUT method is enabled so an attacker can upload arbitrary files including HTML and CGI formats.
CVSS 3.1 · 9.8 Critical
EPSS 56.9%
KEV · Not listed
Vendors
Products
CVE-2018-12526
Telesquare SDT-CS3B1 and SDT-CW3B1 devices through 1.2.0 have a default factory account. Remote attackers can obtain access to the device via TELNET using a hardcoded account.
CVSS 3.0 · 9.8 Critical
EPSS 2.3%
KEV · Not listed
Vendors
Products