Telesquare TLR-2855KS6 - Arbitrary File Deletion Vulnerability

Exploit Title: Telesquare TLR-2855KS6 - Arbitrary File Deletion Exploit Author: Momen Eldawakhly Cyber Guy Vendor Homepage: http://www.telesquare.co.kr/ Version: TLR-2855KS6 Tested on: Linux Firefox CVE : CVE-2021-46419 Proof of Concept DELETE /cgi-bin/test.cgi HTTP/1.1 Host: 192.168.1.5...

Telesquare TLR-2855KS6 Arbitrary File Deletion

Exploit Title: Telesquare TLR-2855KS6 - Arbitrary File Deletion Date: 7/4/2022 Exploit Author: Momen Eldawakhly Cyber Guy Vendor Homepage: http://www.telesquare.co.kr/ Version: TLR-2855KS6 Tested on: Linux Firefox CVE : CVE-2021-46419 Proof of Concept DELETE /cgi-bin/test.cgi HTTP/1.1 Host:...

Telesquare TLR-2855KS6 - Arbitrary File Deletion

Exploit Title: Telesquare TLR-2855KS6 - Arbitrary File Deletion Date: 7/4/2022 Exploit Author: Momen Eldawakhly Cyber Guy Vendor Homepage: http://www.telesquare.co.kr/ Version: TLR-2855KS6 Tested on: Linux Firefox CVE : CVE-2021-46419 Proof of Concept DELETE /cgi-bin/test.cgi HTTP/1.1 Host:...

CVE-2021-46419

creationtimestamp| type| source ---|---|--- 2022-04-07 16:49:36+00:00| seen| https://t.me/cibsecurity/40294 2024-04-03 12:44:08+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-46419.yaml 2024-04-06 19:02:11+00:00| published-proof-of-concept...

CVE-2021-46419

CVE-2021-46419 affects the Telesquare TLR-2855KS6. The publicly documented vector is an unauthenticated HTTP DELETE request to potentially delete arbitrary files on the device (example PoC targets /cgi-bin/test.cgi), which can destroy system files and render the device inoperable. The issue is ex...