CVE-2025-26004
Published: 26 March 2025
Description
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
Security Summary
CVE-2025-26004 is an unauthorized stack buffer overflow vulnerability (CWE-120) in Telesquare TLR-2005KSH version 1.1.4. The flaw is triggered when processing requests to the admin.cgi parameter with the setDdns argument, allowing buffer overflow conditions without authentication.
The vulnerability has a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating it is exploitable remotely over the network by unauthenticated attackers with low complexity and no user interaction. Attackers can achieve high impacts across confidentiality, integrity, and availability, potentially leading to arbitrary code execution, data compromise, or device takeover.
Further technical details, including potential exploitation vectors, are documented in the advisory at https://github.com/Fan-24/Digging/blob/main/6/1.md. No specific patches or mitigations are detailed in available sources.
Details
- CWE(s)
Affected Products
MITRE ATT&CK Enterprise Techniques
Why these techniques?
The CVE describes a remote unauthenticated stack buffer overflow in a public-facing admin.cgi interface on a network device, directly enabling exploitation of public-facing applications for initial access and arbitrary code execution.