CVE-2021-46418: An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of...

Security readout for executives and security teams

CVE-2021-46418 describes an unauthorized file creation issue in Telesquare TLR-2855KS6 devices. The reported impact is that an attacker can create CGI scripts through the HTTP PUT method. For organizations using this device, exposed management interfaces should be treated as a priority until vendor guidance or compensating controls are confirmed. Exposure is most likely where Telesquare TLR-2855KS6 management or web interfaces are reachable by untrusted networks. The source bundle does not define affected firmware versions, so asset owners should verify device model and firmware directly. Prioritize any internet-exposed or partner-accessible TLR-2855KS6 devices. The vulnerability concerns unauthorized file creation on network equipment, and no patch details are provided in the bundle, so exposure reduction is the immediate business control. Mitigation focus: Check Telesquare or device supplier guidance for fixed firmware or configuration changes.; Restrict device management interfaces to trusted administrative networks only.; Block untrusted HTTP access to affected device web services..

Prepared

Jun 2, 2026, 10:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.