CVE-2025-26006

Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with setAutorest

Critical Ā· published March 26, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
38.0
In the wild
Unconfirmed
What it is

šŸ”„ A sneaky stack overflow vulnerability lurks in the Telesquare TLR-2005KSH 1.1.4, triggered by a simple request to the admin.cgi parameter! Think of it as a restaurant where a waiter accidentally takes a customer's order and places too many plates on the table, causing everything to crash down! In this case, the overflow allows attackers to potentially execute malicious code and take control of the device. If exploited, an attacker could gain unauthorized access to the system, potentially leading to complete compromise—imagine someone walking into the restaurant kitchen and changing the entire menu without anyone noticing! This is absolutely devastating for your security.

Put simply

Think of it as a restaurant where a waiter accidentally takes a customer's order and places too many plates on the table, causing everything to crash down! In this case, the overflow allows attackers to potentially execute malicious code and take control of the device. The vulnerability arises when the admin.cgi parameter is manipulated with setAutorest, allowing an attacker to overflow the stack and execute arbitrary code.

What to do

If exploited, an attacker could gain unauthorized access to the system, potentially leading to complete compromise—imagine someone walking into the restaurant kitchen and changing the entire menu without anyone noticing! This is absolutely devastating for your security. To protect yourself, immediately patch the Telesquare TLR-2005KSH to the latest version and ensure that all configurations are checked for unauthorized access. Implement strict input validation to minimize risks. You've got this! Follow these steps and keep your systems secure! šŸ›”ļø

The record
Technical detail
CVSS v3.1
9.8 Ā· CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00449 Ā· 38.0th percentile
Published
2025-03-26T00:00Z
EPSS history
Timeline
  • 26 MAR 00:00Z
    Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with setAutorest
    cvelistv5