CVEvulnerability
CVE-2017-20221
5.3 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2026-03-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 5.3 MEDIUM — CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- CVSS 3.1 ([email protected])
- 3.5 LOW — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
- Weaknesses
- CWE-352
Description
Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 contains a cross-site request forgery vulnerability that allows authenticated attackers to execute arbitrary system commands by exploiting missing request validation. Attackers can craft malicious web pages that perform administrative actions when visited by logged-in users, enabling command execution with router privileges.
Affected configurations
• telesquare sdt-cs3b1 firmware 1.2.0
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- https://cxsecurity.com/issue/WLB-2017120299 Issue Tracking
- https://exchange.xforce.ibmcloud.com/vulnerabilities/136839 Third Party Advisory
- https://packetstormsecurity.com/files/145550 Exploit, Third Party Advisory
- https://www.exploit-db.com/exploits/43400/ Exploit, VDB Entry
- https://www.vulncheck.com/advisories/telesquare-skt-lte-router-sdt-cs3b1-csrf-system-command-execution Third Party Advisory
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5443.php Exploit, Third Party Advisory