<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: tlr-2005ksh firmware</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-9603: A vulnerability was determined in Telesquare TLR-2005KSH 1.2.4</title><link>https://patchthecve.com/cve/CVE-2025-9603.html</link><guid>https://patchthecve.com/cve/CVE-2025-9603.html</guid><pubDate>Sun, 18 Oct 2026 21:10:00 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was determined in Telesquare TLR-2005KSH 1.2.4. The affected element is an unknown function of the file /cgi-bin/internet.cgi?Command=lanCfg. Executing manipulation of the argument Hostname can lead to command injection. The attack may be performed from a remote location. The exploit</description></item><item><title>CVE-2025-28361: Unauthorized stack overflow vulnerability in Telesquare TLR-2005KSH v.1.1.4 allows a remote attacker to obtain</title><link>https://patchthecve.com/cve/CVE-2025-28361.html</link><guid>https://patchthecve.com/cve/CVE-2025-28361.html</guid><pubDate>Wed, 17 Jun 2026 09:04:42 +0000</pubDate><description>HIGH 7.5: Unauthorized stack overflow vulnerability in Telesquare TLR-2005KSH v.1.1.4 allows a remote attacker to obtain sensitive information via the systemutil.cgi component.</description></item><item><title>CVE-2025-26011: Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability when requesting the admin.cgi pa</title><link>https://patchthecve.com/cve/CVE-2025-26011.html</link><guid>https://patchthecve.com/cve/CVE-2025-26011.html</guid><pubDate>Wed, 17 Jun 2026 09:01:25 +0000</pubDate><description>CRITICAL 9.8: Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with setUsernamePassword.</description></item><item><title>CVE-2025-26010: Telesquare TLR-2005KSH 1.1.4 allows unauthorized password modification when requesting the admin.cgi parameter</title><link>https://patchthecve.com/cve/CVE-2025-26010.html</link><guid>https://patchthecve.com/cve/CVE-2025-26010.html</guid><pubDate>Wed, 17 Jun 2026 09:01:25 +0000</pubDate><description>CRITICAL 9.8: Telesquare TLR-2005KSH 1.1.4 allows unauthorized password modification when requesting the admin.cgi parameter with setUserNamePassword.</description></item><item><title>CVE-2025-26009: Telesquare TLR-2005KSH 1.1.4 has an Information Disclosure vulnerability when requesting systemutilit.cgi.</title><link>https://patchthecve.com/cve/CVE-2025-26009.html</link><guid>https://patchthecve.com/cve/CVE-2025-26009.html</guid><pubDate>Wed, 17 Jun 2026 09:01:25 +0000</pubDate><description>HIGH 7.5: Telesquare TLR-2005KSH 1.1.4 has an Information Disclosure vulnerability when requesting systemutilit.cgi.</description></item><item><title>CVE-2025-26008: In Telesquare TLR-2005KSH 1.1.4, an unauthorized stack overflow vulnerability exists when requesting admin.cgi</title><link>https://patchthecve.com/cve/CVE-2025-26008.html</link><guid>https://patchthecve.com/cve/CVE-2025-26008.html</guid><pubDate>Wed, 17 Jun 2026 09:01:25 +0000</pubDate><description>CRITICAL 9.8: In Telesquare TLR-2005KSH 1.1.4, an unauthorized stack overflow vulnerability exists when requesting admin.cgi parameter with setSyncTimeHost.</description></item><item><title>CVE-2025-26007: Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability in the login interface when requ</title><link>https://patchthecve.com/cve/CVE-2025-26007.html</link><guid>https://patchthecve.com/cve/CVE-2025-26007.html</guid><pubDate>Wed, 17 Jun 2026 09:01:25 +0000</pubDate><description>CRITICAL 9.8: Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability in the login interface when requesting systemtil.cgi.</description></item><item><title>CVE-2025-26006: Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability when requesting the admin.cgi pa</title><link>https://patchthecve.com/cve/CVE-2025-26006.html</link><guid>https://patchthecve.com/cve/CVE-2025-26006.html</guid><pubDate>Wed, 17 Jun 2026 09:01:24 +0000</pubDate><description>CRITICAL 9.8: Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with setAutorest.</description></item><item><title>CVE-2025-26005: Telesquare TLR-2005KSH 1.1.4 is vulnerable to unauthorized stack overflow vulnerability when requesting admin.</title><link>https://patchthecve.com/cve/CVE-2025-26005.html</link><guid>https://patchthecve.com/cve/CVE-2025-26005.html</guid><pubDate>Wed, 17 Jun 2026 09:01:24 +0000</pubDate><description>CRITICAL 9.8: Telesquare TLR-2005KSH 1.1.4 is vulnerable to unauthorized stack overflow vulnerability when requesting admin.cgi parameter with setNtp.</description></item><item><title>CVE-2025-26004: Telesquare TLR-2005KSH 1.1.4 is vulnerable to unauthorized stack buffer overflow vulnerability when requesting</title><link>https://patchthecve.com/cve/CVE-2025-26004.html</link><guid>https://patchthecve.com/cve/CVE-2025-26004.html</guid><pubDate>Wed, 17 Jun 2026 09:01:24 +0000</pubDate><description>CRITICAL 9.8: Telesquare TLR-2005KSH 1.1.4 is vulnerable to unauthorized stack buffer overflow vulnerability when requesting admin.cgi parameter with setDdns.</description></item><item><title>CVE-2025-26003: Telesquare TLR-2005KSH 1.1.4 is affected by an unauthorized command execution vulnerability when requesting th</title><link>https://patchthecve.com/cve/CVE-2025-26003.html</link><guid>https://patchthecve.com/cve/CVE-2025-26003.html</guid><pubDate>Wed, 17 Jun 2026 09:01:24 +0000</pubDate><description>CRITICAL 9.8: Telesquare TLR-2005KSH 1.1.4 is affected by an unauthorized command execution vulnerability when requesting the admin.cgi parameter with setAutorest.</description></item><item><title>CVE-2025-26002: Telesquare TLR-2005KSH 1.1.4 is affected by an unauthorized stack overflow vulnerability when requesting the a</title><link>https://patchthecve.com/cve/CVE-2025-26002.html</link><guid>https://patchthecve.com/cve/CVE-2025-26002.html</guid><pubDate>Wed, 17 Jun 2026 09:01:24 +0000</pubDate><description>CRITICAL 9.8: Telesquare TLR-2005KSH 1.1.4 is affected by an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with setSyncTimeHost.</description></item><item><title>CVE-2025-26001: Telesquare TLR-2005KSH 1.1.4 is vulnerable to Information Disclosure via the parameter getUserNamePassword.</title><link>https://patchthecve.com/cve/CVE-2025-26001.html</link><guid>https://patchthecve.com/cve/CVE-2025-26001.html</guid><pubDate>Wed, 17 Jun 2026 09:01:24 +0000</pubDate><description>HIGH 7.5: Telesquare TLR-2005KSH 1.1.4 is vulnerable to Information Disclosure via the parameter getUserNamePassword.</description></item><item><title>CVE-2024-29269: An issue discovered in Telesquare TLR-2005Ksh 1.0.0 and 1.1.4 allows attackers to run arbitrary system command</title><link>https://patchthecve.com/cve/CVE-2024-29269.html</link><guid>https://patchthecve.com/cve/CVE-2024-29269.html</guid><pubDate>Wed, 17 Jun 2026 07:22:42 +0000</pubDate><description>HIGH 8.8: An issue discovered in Telesquare TLR-2005Ksh 1.0.0 and 1.1.4 allows attackers to run arbitrary system commands via the Cmd parameter.</description></item></channel></rss>