Telesquare TLR-2005KSH Stack Buffer Overflow Vulnerability in admin.cgi

A stack buffer overflow vulnerability has been identified in the Telesquare TLR-2005KSH device, specifically in version 1.1.4. The vulnerability arises in the admin.cgi parameter when the setDdns option is requested, allowing for unauthorized access.

Impact

Exploitation of this vulnerability leads to a stack buffer overflow, which can potentially allow for arbitrary code execution or causing a denial-of-service condition on the device.

Reproduction

To reproduce this vulnerability, send a request to the admin.cgi parameter with the setDdns option. This can be done using a web browser or a tool like curl or Postman. The request should be sent to the Telesquare TLR-2005KSH device running version 1.1.4.