CVE-2021-46418 - OpenCVE

An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

AV:N/AC:L/Au:N/C:N/I:P/A:N

Vendors & Products
CPE Configurations

Vendors	Products
Telesquare	Tlr-2855ks6 Firmware Tlr-2855ks6

Configuration 1 [-]

AND

cpe:2.3:o:telesquare:tlr-2855ks6_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:telesquare:tlr-2855ks6:-:*:*:*:*:*:*:*

References

Link	Resource
http://packetstormsecurity.com/files/166674/Telesquare-TLR-2855KS6-Arbitrary-File-Creation.html	Exploit Third Party Advisory VDB Entry
https://drive.google.com/drive/folders/1avIfk1MZNmNQYePE1_n4irC24daxCeBA	Exploit Third Party Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2022-04-07T11:18:31

Updated: 2022-04-11T19:16:27

Reserved: 2022-01-24T00:00:00

Link: CVE-2021-46418

JSON object: View

NVD Information

Status : Analyzed

Published: 2022-04-07T12:15:07.780

Modified: 2022-07-12T17:42:04.277

Link: CVE-2021-46418

JSON object: View

Redhat Information

No data.

CWE

NVD-CWE-Other

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:telesquare:tlr-2855ks6_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "60764FA0-4BDD-4224-BE22-3C3B60F9EED4", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:telesquare:tlr-2855ks6:-:*:*:*:*:*:*:*", "matchCriteriaId": "C2E750B7-D264-4CC7-B052-5C760C25CCF0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts."}, {"lang": "es", "value": "Una vulnerabilidad de creaci\u00f3n de archivos no autorizada en Telesquare TLR-2855KS6 por medio del m\u00e9todo PUT puede permitir una creaci\u00f3n de scripts CGI"}], "id": "CVE-2021-46418", "lastModified": "2022-07-12T17:42:04.277", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-04-07T12:15:07.780", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "url": "http://packetstormsecurity.com/files/166674/Telesquare-TLR-2855KS6-Arbitrary-File-Creation.html"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://drive.google.com/drive/folders/1avIfk1MZNmNQYePE1_n4irC24daxCeBA"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}