CVE-2021-46424

EPSS 36.5%

Vexday Risk Score

50Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 36.5%KEV nãoPoC públicaNuclei simMetasploit —Patch —

Lifecycle

27 Apr 2022Published on NVD

12 May 2022Public PoC

Weaponization speed

15 daysto first PoC

Recommendation: Plan a near-term fix — a public PoC already exists.

Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencepacketstormsecurity.com/files/167127/TLR-2005KSH-Arbitrary-File-Delete.htmlunverified exploitdbwww.exploit-db.com/exploits/50935unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://packetstormsecurity.com/files/167127/TLR-2005KSH-Arbitrary-File-Delete.html https://drive.google.com/drive/folders/1_e3eJ8fzhCWnCkoRpbLoyQecuKkPR4OD?usp=sharing