← Retour aux CVEs

CVE-2017-20222

HIGH

7.5

Description

Telesquare SKT LTE Router SDT-CS3B1 software version 1.2.0 contains an unauthenticated remote reboot vulnerability that allows attackers to trigger device reboot without authentication. Attackers can send POST requests to the lte.cgi endpoint with the Command=Reboot parameter to cause denial of service by forcing the router to restart.

Details CVE

Score CVSS v3.17.5

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie3/16/2026

Derniere modification3/16/2026

Sourcenvd

Observations honeypot0

Faiblesses (CWE)

CWE-306

References

https://cxsecurity.com/issue/WLB-2017120300(disclosure@vulncheck.com)

https://exchange.xforce.ibmcloud.com/vulnerabilities/136825(disclosure@vulncheck.com)

https://packetstormsecurity.com/files/145555(disclosure@vulncheck.com)

https://www.exploit-db.com/exploits/43401/(disclosure@vulncheck.com)

https://www.vulncheck.com/advisories/telesquare-skt-lte-router-sdt-cs3b1-unauthenticated-remote-reboot(disclosure@vulncheck.com)

https://www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5444.php(disclosure@vulncheck.com)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.