CVE-2017-20224 | Critical | 9.8 | 2026-03-16 | Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious con… |
CVE-2017-20223 | Critical | 9.8 | 2026-03-16 | Telesquare SKT LTE Router SDT-CS3B1 firmware version 1.2.0 contains an insecure direct object reference vulnerability that allows attackers to bypass authoriza… |
CVE-2017-20222 | High | 7.5 | 2026-03-16 | Telesquare SKT LTE Router SDT-CS3B1 software version 1.2.0 contains an unauthenticated remote reboot vulnerability that allows attackers to trigger device rebo… |
CVE-2017-20221 | Medium | 4.3 | 2026-03-16 | Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 contains a cross-site request forgery vulnerability that allows authenticated attackers to execute arbitrary… |
CVE-2025-9603 | Medium | 6.3 | 2025-08-29 | A vulnerability was determined in Telesquare TLR-2005KSH 1.2.4. The affected element is an unknown function of the file /cgi-bin/internet.cgi?Command=lanCfg. E… |
CVE-2025-28361 | High | 7.5 | 2025-03-26 | Unauthorized stack overflow vulnerability in Telesquare TLR-2005KSH v.1.1.4 allows a remote attacker to obtain sensitive information via the systemutil.cgi com… |
CVE-2025-26011 | Critical | 9.8 | 2025-03-26 | Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with setUsernamePassword. |
CVE-2025-26010 | Critical | 9.8 | 2025-03-26 | Telesquare TLR-2005KSH 1.1.4 allows unauthorized password modification when requesting the admin.cgi parameter with setUserNamePassword. |
CVE-2025-26009 | High | 7.5 | 2025-03-26 | Telesquare TLR-2005KSH 1.1.4 has an Information Disclosure vulnerability when requesting systemutilit.cgi. |
CVE-2025-26008 | Critical | 9.8 | 2025-03-26 | In Telesquare TLR-2005KSH 1.1.4, an unauthorized stack overflow vulnerability exists when requesting admin.cgi parameter with setSyncTimeHost. |
CVE-2025-26007 | Critical | 9.8 | 2025-03-26 | Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability in the login interface when requesting systemtil.cgi. |
CVE-2025-26006 | Critical | 9.8 | 2025-03-26 | Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with setAutorest. |
CVE-2025-26005 | Critical | 9.8 | 2025-03-26 | Telesquare TLR-2005KSH 1.1.4 is vulnerable to unauthorized stack overflow vulnerability when requesting admin.cgi parameter with setNtp. |
CVE-2025-26004 | Critical | 9.8 | 2025-03-26 | Telesquare TLR-2005KSH 1.1.4 is vulnerable to unauthorized stack buffer overflow vulnerability when requesting admin.cgi parameter with setDdns. |
CVE-2025-26003 | Critical | 9.8 | 2025-03-26 | Telesquare TLR-2005KSH 1.1.4 is affected by an unauthorized command execution vulnerability when requesting the admin.cgi parameter with setAutorest. |
CVE-2025-26002 | Critical | 9.8 | 2025-03-26 | Telesquare TLR-2005KSH 1.1.4 is affected by an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with setSyncTimeHost. |
CVE-2025-26001 | High | 7.5 | 2025-03-26 | Telesquare TLR-2005KSH 1.1.4 is vulnerable to Information Disclosure via the parameter getUserNamePassword. |
CVE-2024-29269 | High | 8.8 | 2024-04-10 | An issue discovered in Telesquare TLR-2005Ksh 1.0.0 and 1.1.4 allows attackers to run arbitrary system commands via the Cmd parameter. |
CVE-2021-46424 | Critical | 9.1 | 2022-04-27 | Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal fil… |
CVE-2021-46423 | Medium | 5.3 | 2022-04-27 | Telesquare TLR-2005KSH 1.0.0 is affected by an unauthenticated file download vulnerability that allows a remote attacker to download a full configuration file. |
CVE-2021-46422 | Critical | 9.8 | 2022-04-27 | Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute OS commands without any authentication. |
CVE-2021-46419 | Critical | 9.1 | 2022-04-07 | An unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE method can allow deletion of system files and scripts. |
CVE-2021-46418 | High | 7.5 | 2022-04-07 | An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts. |
CVE-2021-45428 | Critical | 9.8 | 2022-01-03 | TLR-2005KSH is affected by an incorrect access control vulnerability. THe PUT method is enabled so an attacker can upload arbitrary files including HTML and CG… |
CVE-2018-12526 | Critical | 9.8 | 2018-06-21 | Telesquare SDT-CS3B1 and SDT-CW3B1 devices through 1.2.0 have a default factory account. Remote attackers can obtain access to the device via TELNET using a ha… |