Cyber Posture

CVE-2025-26003

Critical

Published: 26 March 2025

Published
26 March 2025
Modified
01 April 2025
KEV Added
Patch
CVSS Score 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0057 68.8th percentile
Risk Priority 20 60% EPSS · 20% KEV · 20% CVSS

Description

Adversaries may abuse Unix shell commands and scripts for execution.

Security Summary

CVE-2025-26003 is an unauthorized command execution vulnerability (CWE-94: Code Injection) affecting Telesquare TLR-2005KSH version 1.1.4. The issue arises when the admin.cgi parameter is requested with the setAutorest option, allowing improper handling that leads to command injection. Published on 2025-03-26, it carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating critical severity due to its potential for complete system compromise.

The vulnerability can be exploited by any unauthenticated attacker with network access to the affected device. Exploitation requires low complexity and no user interaction, enabling remote arbitrary command execution. This grants high-impact privileges, potentially allowing full control over the device, including data exfiltration, modification, or disruption of services.

Mitigation details and further technical analysis are provided in the referenced advisory at https://github.com/Fan-24/Digging/blob/main/5/1.md.

Details

CWE(s)
CWE-94

Affected Products

telesquare
tlr-2005ksh firmware
1.1.4

MITRE ATT&CK Enterprise Techniques

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
T1059.004 Unix Shell Execution
Adversaries may abuse Unix shell commands and scripts for execution.
Why these techniques?

Remote command injection in public-facing admin.cgi CGI script directly enables T1190 exploitation of public-facing applications for initial access and arbitrary command execution via Unix shell (T1059.004) on the Linux-based device.

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

References