CVE-2024-29269

An issue discovered in Telesquare TLR-2005Ksh 1.0.0 and 1.1.4 allows attackers to run arbitrary system commands via the Cmd parameter.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

6.29% chance of exploitation in the next 30 days, 93th percentile

Nuclei

critical

Published

2024-04-10

Updated

2024-08-27

Proof-of-concept exploits (9)

• Chocapikk/CVE-2024-2926917★ · 2024-05-19
• Jhonsonwannaa/CVE-2024-292690★ · 2025-02-22
• K3ysTr0K3R/CVE-2024-29269-EXPLOIT8★ · 2024-07-02
• Quantum-Hacker/CVE-2024-292691★ · 2024-09-28
• YongYe-Security/CVE-2024-292691★ · 2024-04-12
• dream434/CVE-2024-292690★ · 2025-02-22
• hack-with-rohit/CVE-2024-29269-RCE5★ · 2024-09-08
• wutalent/CVE-2024-292696★ · 2024-04-03
• chsxthwik/CVE-2024-29269

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29269.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2017-5487
• CVE-2017-9841
• CVE-2021-42013
• CVE-2023-27372
• CVE-2024-31819
• CVE-2024-6387