CVE-2024-29269

An issue discovered in Telesquare TLR-2005Ksh 1.0.0 and 1.1.4 allows attackers to run arbitrary system commands via the Cmd parameter.

CVSS v3.1 CNA

8.8 HIGHCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

6.35% chance of exploitation in the next 30 days, 94th percentile

Nuclei

critical

Published

2024-04-10

Updated

2024-08-27

Proof-of-concept exploits (6)

• Chocapikk/CVE-2024-2926917★ · 2024-05-19
• Jhonsonwannaa/CVE-2024-292690★ · 2025-02-22
• YongYe-Security/CVE-2024-292691★ · 2024-04-12
• dream434/CVE-2024-292690★ · 2025-02-22
• hack-with-rohit/CVE-2024-29269-RCE5★ · 2024-09-08
• dkstar11q/CVE-2024-292690★ · 2024-09-28

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29269.yaml

Security advisories

• wutalent/CVE-2024-29269/blob/main/index.md

References

• CVE Record
• NVD entry

Related

• CVE-2017-5487
• CVE-2017-9841
• CVE-2021-42013
• CVE-2023-27372
• CVE-2024-31819
• CVE-2024-6387