CVE-2026-5573: Unrestricted Upload in Technostrobe HI-LED-WR120-G2

The unrestricted upload vulnerability in Technostrobe HI-LED-WR120-G2 poses a significant threat. An attacker could leverage this flaw to upload malicious files, potentially including web shells, ransomware, or other malware. Successful exploitation could lead to complete compromise of the device, allowing the attacker to control its functionality, steal sensitive data, or use it as a pivot point to attack other systems on the network. The availability of a public exploit significantly increases the risk of widespread exploitation, particularly given the device's potential use in critical infrastructure or industrial control systems. The ability to manipulate the 'cwd' argument suggests a potential for arbitrary code execution, expanding the attack surface considerably.

1. Reserved2026-04-04
2. Published2026-04-05
3. Modified2026-04-06
4. EPSS updated2026-04-13

Due to the lack of a vendor-provided patch, immediate mitigation is crucial. First, isolate the affected HI-LED-WR120-G2 devices from the network to prevent remote exploitation. Implement strict firewall rules to block all inbound traffic to the /fs endpoint. Consider using a web application firewall (WAF) to filter potentially malicious file uploads. Monitor system logs for unusual file activity or suspicious processes. While a rollback to a previous, unaffected firmware version is not explicitly mentioned, it should be considered if available and tested thoroughly before deployment. Regularly scan the device for unauthorized files and monitor its behavior for signs of compromise.