CVE-2024-29269

This vulnerability is like a “backdoor command box” hidden in the device: if someone can reach the device from the nearby network, they can send the right input and force it to execute operating system commands.
For a small business, that can mean the device is no longer just routing traffic—it can become a launch point to interfere with your systems or steal information.

This matters if you run Telesquare TLR-2005Ksh (firmware 1.0.0 or 1.1.4) and the device can be reached from the “adjacent network” (nearby network zone) by an attacker.
There is no authentication required and no user action needed for the malicious command to be triggered.
The risk is highest when network isolation is weak—i.e., an attacker can reach the device from the adjacent network—because exploitation does not require credentials.

This is urgent because exploitation has been reported in the wild, including activity by the Evooo1Bot botnet, which targets internet-facing and other reachable devices to establish access.
Given that the weakness allows arbitrary command execution without authentication, any reachable affected device should be treated as actively exploitable now.