Telesquare Tlr-2005ksh Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Telesquare Tlr-2005ksh Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (17)

• CVE-2021-45428 — CVSS 9.8 (critical): TLR-2005KSH is affected by an incorrect access control vulnerability. THe PUT method is enabled so an attacker can upload arbitrary files…
• CVE-2025-26004 — CVSS 9.8 (critical): Telesquare TLR-2005KSH 1.1.4 is vulnerable to unauthorized stack buffer overflow vulnerability when requesting admin.cgi parameter with…
• CVE-2025-26005 — CVSS 9.8 (critical): Telesquare TLR-2005KSH 1.1.4 is vulnerable to unauthorized stack overflow vulnerability when requesting admin.cgi parameter with setNtp.
• CVE-2025-26006 — CVSS 9.8 (critical): Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with setAutorest.
• CVE-2025-26007 — CVSS 9.8 (critical): Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability in the login interface when requesting systemtil.cgi.
• CVE-2025-26008 — CVSS 9.8 (critical): In Telesquare TLR-2005KSH 1.1.4, an unauthorized stack overflow vulnerability exists when requesting admin.cgi parameter with…
• CVE-2025-26010 — CVSS 9.8 (critical): Telesquare TLR-2005KSH 1.1.4 allows unauthorized password modification when requesting the admin.cgi parameter with setUserNamePassword.
• CVE-2025-26011 — CVSS 9.8 (critical): Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with…
• CVE-2025-26002 — CVSS 9.8 (critical): Telesquare TLR-2005KSH 1.1.4 is affected by an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with…
• CVE-2025-26003 — CVSS 9.8 (critical): Telesquare TLR-2005KSH 1.1.4 is affected by an unauthorized command execution vulnerability when requesting the admin.cgi parameter with…
• CVE-2021-46424 — CVSS 9.1 (critical): Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even…
• CVE-2024-29269 — CVSS 8.8 (high): An issue discovered in Telesquare TLR-2005Ksh 1.0.0 and 1.1.4 allows attackers to run arbitrary system commands via the Cmd parameter.
• CVE-2025-26001 — CVSS 7.5 (high): Telesquare TLR-2005KSH 1.1.4 is vulnerable to Information Disclosure via the parameter getUserNamePassword.
• CVE-2025-26009 — CVSS 7.5 (high): Telesquare TLR-2005KSH 1.1.4 has an Information Disclosure vulnerability when requesting systemutilit.cgi.
• CVE-2025-28361 — CVSS 7.5 (high): Unauthorized stack overflow vulnerability in Telesquare TLR-2005KSH v.1.1.4 allows a remote attacker to obtain sensitive information via…
• CVE-2025-9603 — CVSS 6.3 (medium): A vulnerability was determined in Telesquare TLR-2005KSH 1.2.4. The affected element is an unknown function of the file…
• CVE-2021-46423 — CVSS 5.3 (medium): Telesquare TLR-2005KSH 1.0.0 is affected by an unauthenticated file download vulnerability that allows a remote attacker to download a full…