CVE-2017-20222 | BDVDB-2026-320633 Detail
TelesquareSDT-CS3B1
Description#
Telesquare SKT LTE Router SDT-CS3B1 software version 1.2.0 contains an unauthenticated remote reboot vulnerability that allows attackers to trigger device reboot without authentication. Attackers can send POST requests to the lte.cgi endpoint with the Command=Reboot parameter to cause denial of service by forcing the router to restart.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact high. Attack vector: network.
Weaknesses#
- CWE-306 Missing Authentication for Critical Function
References#
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5444.php
- https://cxsecurity.com/issue/WLB-2017120300
- https://packetstormsecurity.com/files/145555
- https://www.exploit-db.com/exploits/43401/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/136825
- https://www.vulncheck.com/advisories/telesquare-skt-lte-router-sdt-cs3b1-unauthenticated-remote-reboot
Exploit#
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.