CVE-2025-26007

Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability in the login interface when requesting systemtil.cgi

Critical · published March 26, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
38.0
In the wild
Unconfirmed
What it is

🚨 A single malformed request is all it takes to exploit this stack overflow vulnerability. The Telesquare TLR-2005KSH 1.1.4 login interface is like a security guard letting anyone through the door just by asking nicely! 🔥 Think of it like a restaurant where the chef takes all orders without checking if they're valid. If a customer orders something completely bizarre, the kitchen might overflow with ingredients, causing chaos! In this case, the login interface doesn’t validate input properly, leading to a stack overflow. An attacker could trigger this vulnerability to gain unauthorized access, potentially compromising sensitive data or controlling the device entirely. The consequences could be absolutely devastating, leaving your system wide open for malicious activities and severe data breaches!

Put simply

Think of it like a restaurant where the chef takes all orders without checking if they're valid. If a customer orders something completely bizarre, the kitchen might overflow with ingredients, causing chaos! In this case, the login interface doesn’t validate input properly, leading to a stack overflow. The unauthorized stack overflow vulnerability occurs in Telesquare TLR-2005KSH's login interface, specifically when requesting 'systemtil.cgi.' This mishap allows attackers to exploit unchecked parameters, leading to potential code execution.

What to do

An attacker could trigger this vulnerability to gain unauthorized access, potentially compromising sensitive data or controlling the device entirely. The consequences could be absolutely devastating, leaving your system wide open for malicious activities and severe data breaches! Immediately patch to version 1.1.5 to close this dangerous vulnerability. Additionally, ensure proper input validation and sanitization for all parameters sent to the login interface. Regularly audit your systems to catch any future weaknesses! You've got this! With these fixes in place, your system will be safer in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00449 · 38.0th percentile
Published
2025-03-26T00:00Z
EPSS history
Timeline
  • 26 MAR 00:00Z
    Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability in the login interface when requesting systemtil.cgi
    cvelistv5