PT-2022-12350 · Unknown · Tlr-2005Ksh

Published 2022-01-03 · Updated 2022-05-12 · CVE-2021-45428

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions TLR-2005KSH (affected versions not specified)

Description The issue is related to incorrect access control, allowing an attacker to upload arbitrary files, including HTML and CGI formats, by exploiting the enabled PUT method.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2021-45428

Affected Products

Tlr-2005Ksh

References · 7

• 🔥 http://packetstormsecurity.com/files/167101/TLR-2005KSH-Arbitrary-File-Upload.html · Exploit
• 🔥 https://exploit-db.com/exploits/50931 · Exploit
• 🔥 https://drive.google.com/file/d/1wM1SPOfB9mH2SES7cAmlysuI9fOpFB3F/view?usp=sharing · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-45428 · Security Note
• https://t.me/cvenotify/25230 · Telegram Post
• https://t.me/cvenotify/30060 · Telegram Post
• https://t.me/cibsecurity/34859 · Telegram Post