CVE-2017-20221
Telesquare SKT LTE Router SDT-CS3B1 CSRF System Command Execution
- State
- Published
- Severity
- 5.3 Medium
- Published
- Mar 16, 2026
- Updated
- Apr 7, 2026
- Reserved
- Mar 15, 2026
Description
Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 contains a cross-site request forgery vulnerability that allows authenticated attackers to execute arbitrary system commands by exploiting missing request validation. Attackers can craft malicious web pages that perform administrative actions when visited by logged-in users, enabling command execution with router privileges.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L | VulnCheck |
| 3.1 | 4.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N | VulnCheck |
Weaknesses
- CWE-352 Cross-Site Request Forgery (CSRF)
Affected Products
| Product | Versions |
|---|---|
SDT-CS3B1Telesquare |
|
References
- Zero Science Lab Disclosurethird-party-advisory
- CXSecuritythird-party-advisory
- Packet Storm Securityexploit
- Exploit DBexploit
- IBM X-Force Exchangevdb-entry
- VulnCheck Advisory: Telesquare SKT LTE Router SDT-CS3B1 CSRF System Command Executionthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.