Google won't generally outright penalize a site for this. Most sites accept any URL parameters which don't change the page, but do change the URL:
Usually when Google finds duplicate pages within your site, it just chooses one to index and ignores the rest.
The disadvantage to your setup is that:
Users may find various URLs for a page and link into different ones.
Googlebot may have to crawl many variations of each URL which may use up your crawl budget (then Googlebot won't find other important pages)
Google may choose to index a URL that you would not prefer.
Links into various URLs with the same content will spread your link juice (Pagerank) to various URLs and you will not rank as highly as if all the links were to the same page.
Some bots check to make sure your site serves 404 error pages at expected URLs such as /this-is-a-404-tecwnstst.html and your site will fail that check. For a long time you couldn't register your site in Google Webmaster Tools unless you served 404 pages at nonsense URLs.
As a fix you could:
Redirect all the pages back to the root
Change your setup so that you only serve that page at one URL and serve 404 pages elsewhere