CVE-2017-20224CWE-434

Telesquare SKT LTE Router SDT-CS3B1 WebDAV Arbitrary File Upload

Critical · published March 16, 2026

CVSS v4.0
9.3
EPSS
1%
Percentile
64.2
In the wild
Unconfirmed
What it is

Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious content by exploiting enabled WebDAV HTTP methods. Attackers can use PUT, DELETE, MKCOL, MOVE, COPY, and PROPPATCH methods to upload executable code, delete files, or manipulate server content for remote code execution or denial of service.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.01058 · 64.2th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2026-03-16T01:28Z
EPSS history
Timeline
  • 16 MAR 01:28Z
    Telesquare SKT LTE Router SDT-CS3B1 WebDAV Arbitrary File Upload
    cvelistv5