CVE-2025-26004

Telesquare TLR-2005KSH 1.1.4 is vulnerable to unauthorized stack buffer overflow vulnerability when requesting admin.cgi parameter with setDdns

Critical · published March 26, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
38.0
In the wild
Unconfirmed
What it is

🚨 A tiny parameter can unleash chaos! The Telesquare TLR-2005KSH 1.1.4 has a critical stack buffer overflow vulnerability just waiting for a crafty command! 🔥 Think of it like a tightly packed suitcase bursting open at the seams – a single wrong tweak can spill everything out! Just like that suitcase, this vulnerability lets attackers overwrite crucial data, potentially crippling your entire system. An attacker could exploit this vulnerability to execute arbitrary code, leading to complete system compromise! This means unauthorized access to sensitive data, installation of malicious software, or even total control over the device — absolutely devastating!

Put simply

Think of it like a tightly packed suitcase bursting open at the seams – a single wrong tweak can spill everything out! Just like that suitcase, this vulnerability lets attackers overwrite crucial data, potentially crippling your entire system. This stack buffer overflow occurs when an attacker sends a specially crafted request to the 'admin.cgi' parameter with 'setDdns', allowing them to overwrite adjacent memory and execute malicious code.

What to do

An attacker could exploit this vulnerability to execute arbitrary code, leading to complete system compromise! This means unauthorized access to sensitive data, installation of malicious software, or even total control over the device — absolutely devastating! Immediate patching to version 1.1.5 is essential! Additionally, review your security configurations and ensure that access to sensitive scripts like 'admin.cgi' is properly restricted. You’ve got this! Follow these steps to secure your systems and achieve hero status in protecting your network! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00449 · 38.0th percentile
Published
2025-03-26T00:00Z
EPSS history
Timeline
  • 26 MAR 00:00Z
    Telesquare TLR-2005KSH 1.1.4 is vulnerable to unauthorized stack buffer overflow vulnerability when requesting admin.cgi parameter with setDdns
    cvelistv5