CVE-2017-20221CWE-352

Telesquare SKT LTE Router SDT-CS3B1 CSRF System Command Execution

Medium · published March 16, 2026

CVSS v4.0
5.3
EPSS
0%
Percentile
20.5
In the wild
Unconfirmed
What it is

Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 contains a cross-site request forgery vulnerability that allows authenticated attackers to execute arbitrary system commands by exploiting missing request validation. Attackers can craft malicious web pages that perform administrative actions when visited by logged-in users, enabling command execution with router privileges.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L
EPSS
0.00291 · 20.5th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2026-03-16T01:28Z
EPSS history
Timeline
  • 16 MAR 01:28Z
    Telesquare SKT LTE Router SDT-CS3B1 CSRF System Command Execution
    cvelistv5