CVE-2017-20223

9.8 CRITICAL
Published: March 16, 2026 Modified: April 14, 2026
View on NVD

Description

Telesquare SKT LTE Router SDT-CS3B1 firmware version 1.2.0 contains an insecure direct object reference vulnerability that allows attackers to bypass authorization and access resources by manipulating user-supplied input parameters. Attackers can directly reference objects in the system to retrieve sensitive information and access functionalities without proper access controls.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
https://cxsecurity.com/issue/WLB-2017120297
Source: disclosure@vulncheck.com
Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/136993
Source: disclosure@vulncheck.com
Third Party Advisory
https://packetstormsecurity.com/files/145551
Source: disclosure@vulncheck.com
Third Party Advisory
https://www.exploit-db.com/exploits/43402/
Source: disclosure@vulncheck.com
Third Party Advisory VDB Entry
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5445.php
Source: disclosure@vulncheck.com
Third Party Advisory

6 reference(s) from NVD

Quick Stats

CVSS v3 Score
9.8 / 10.0
EPSS (Exploit Probability)
0.0%
7th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

Affected Vendors

telesquare