Description
Telesquare SDT-CW3B1、TLR-2005Ksh 存在命令注入漏洞，此漏洞是由于当用户访问admin.cgi时，程序未充分验证用户身份所导致的。
Telesquare admin.cgi 命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://peiqi.wgpsec.org/wiki/iot/Telesquare/Telesquare%20SDT-CW3B1%20admin.cgi%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%20CVE-2021-46422.html
https://github.com/zeroChen00/exp-poc/blob/main/TelesquareSDT-CW3B1%E6%97%A0%E7%BA%BF%E8%B7%AF%E7%94%B1%E5%99%A8admin.cgi%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E(CVE-2021-46422).md
https://www.exploit-db.com/exploits/50948
https://avd.aliyun.com/detail?id=AVD-2021-46422
https://www.lmboke.com/archives/telesquare-tlr-2005kshlu-you-qi-yuan-cheng-ming-ling-zhi-xing-lou-dong-cve-2024-29269
https://blog.csdn.net/qq_41904294/article/details/137466784
https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=33751
https://cujo.com/blog/the-2022-2023-iot-botnet-report-vulnerabilities-targeted/
https://stack.chaitin.com/poc/detail/820
https://cve.imfht.com/poc_detail/21195059c1ae52f8db0df9e7f01ace4f1e716325?lang=en