Cyber Resilience

CVE-2024-29269

HighPublic PoC

Published: 10 April 2024

Published
10 April 2024
Modified
17 June 2025
KEV Added
—
Patch
—
CVSS Score v3.1 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.9303 99.8th percentile
Risk Priority 73 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-29269 is a high-severity Command Injection (CWE-77) vulnerability in Telesquare Tlr-2005Ksh Firmware. Its CVSS base score is 8.8 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 0.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

Deeper analysis

CVE-2024-29269 is a command injection vulnerability, tracked under CWE-77, that affects the Telesquare TLR-2005Ksh wireless router in firmware versions 1.0.0 and 1.1.4. The flaw resides in an exposed parameter named Cmd that fails to sanitize input, enabling execution of arbitrary operating-system commands. It carries a CVSS 3.1 base score of 8.8 with an attack vector of adjacent network, low complexity, and no required privileges or user interaction.

An unauthenticated attacker positioned on the same network segment can supply malicious payloads through the Cmd parameter to obtain full read, write, and execute capabilities on the device, resulting in complete compromise of confidentiality, integrity, and availability.

Public references consist of a GitHub repository containing technical details and proof-of-concept material; no vendor advisory, firmware update, or official mitigation guidance is referenced in the available sources. The CVE’s EPSS score has remained consistently high, currently 0.9303 with a recorded peak of 0.9361, indicating sustained exploitation interest since disclosure.

EU & UK References

Vulnerability details

An issue discovered in Telesquare TLR-2005Ksh 1.0.0 and 1.1.4 allows attackers to run arbitrary system commands via the Cmd parameter.

CWE(s)
CWE-77

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
attack.mitre.org →
T1059.004 Unix Shell Execution
Adversaries may abuse Unix shell commands and scripts for execution.
attack.mitre.org →
Why these techniques?

Command injection via the Cmd parameter in a network device's exposed service enables exploitation of a public-facing application (T1190) for arbitrary Unix shell command execution (T1059.004).

Affected Assets

telesquare
tlr-2005ksh firmware
1.0.0, 1.1.4

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References