Telesquare vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2017-20224 Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious contCritical 9.3 · Mar 16, 2026
• CVE-2017-20223 Telesquare SKT LTE Router SDT-CS3B1 firmware version 1.2.0 contains an insecure direct object reference vulnerability that allows attackers to bypass authorizatCritical 9.3 · Mar 16, 2026
• CVE-2017-20222 Telesquare SKT LTE Router SDT-CS3B1 software version 1.2.0 contains an unauthenticated remote reboot vulnerability that allows attackers to trigger device rebooHigh 8.7 · Mar 16, 2026
• CVE-2025-28361 Unauthorized stack overflow vulnerability in Telesquare TLR-2005KSH v.1.1.4 allows a remote attacker to obtain sensitive information via the systemutil.cgi compHigh 7.5 · Mar 26, 2025
• CVE-2025-26011 Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with setUsernamePassword.Critical 9.8 · Mar 26, 2025
• CVE-2025-26010 Telesquare TLR-2005KSH 1.1.4 allows unauthorized password modification when requesting the admin.cgi parameter with setUserNamePassword.Critical 9.8 · Mar 26, 2025
• CVE-2025-26009 Telesquare TLR-2005KSH 1.1.4 has an Information Disclosure vulnerability when requesting systemutilit.cgi.High 7.5 · Mar 26, 2025
• CVE-2025-26008 In Telesquare TLR-2005KSH 1.1.4, an unauthorized stack overflow vulnerability exists when requesting admin.cgi parameter with setSyncTimeHost.Critical 9.8 · Mar 26, 2025
• CVE-2025-26007 Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability in the login interface when requesting systemtil.cgi.Critical 9.8 · Mar 26, 2025
• CVE-2025-26006 Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with setAutorest.Critical 9.8 · Mar 26, 2025
• CVE-2025-26005 Telesquare TLR-2005KSH 1.1.4 is vulnerable to unauthorized stack overflow vulnerability when requesting admin.cgi parameter with setNtp.Critical 9.8 · Mar 26, 2025
• CVE-2025-26004 Telesquare TLR-2005KSH 1.1.4 is vulnerable to unauthorized stack buffer overflow vulnerability when requesting admin.cgi parameter with setDdns.Critical 9.8 · Mar 26, 2025
• CVE-2025-26003 Telesquare TLR-2005KSH 1.1.4 is affected by an unauthorized command execution vulnerability when requesting the admin.cgi parameter with setAutorest.Critical 9.8 · Mar 26, 2025
• CVE-2025-26002 Telesquare TLR-2005KSH 1.1.4 is affected by an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with setSyncTimeHost.Critical 9.8 · Mar 26, 2025
• CVE-2025-26001 Telesquare TLR-2005KSH 1.1.4 is vulnerable to Information Disclosure via the parameter getUserNamePassword.High 7.5 · Mar 26, 2025
• CVE-2024-29269 An issue discovered in Telesquare TLR-2005Ksh 1.0.0 and 1.1.4 allows attackers to run arbitrary system commands via the Cmd parameter.High 8.8 · Apr 10, 2024
• CVE-2021-46424 Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal fileCritical 9.1 · Apr 27, 2022
• CVE-2021-46422 Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute OS commands without any authentication.Critical 9.8 · Apr 27, 2022
• CVE-2021-46419 An unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE method can allow deletion of system files and scripts.Critical 9.1 · Apr 7, 2022
• CVE-2021-46418 An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts.High 7.5 · Apr 7, 2022
• CVE-2021-45428 TLR-2005KSH is affected by an incorrect access control vulnerability.Critical 9.8 · Jan 3, 2022
• CVE-2018-12526 Telesquare SDT-CS3B1 and SDT-CW3B1 devices through 1.2.0 have a default factory account.Critical 9.8 · Jun 21, 2018