Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 contains a cross-site request forgery vulnerability that allows authenticated attackers to execute arbitrary system commands by exploiting missing request validation. Attackers can craft malicious web pages that perform administrative actions when visited by logged-in users, enabling command execution with router privileges.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2017-20221 - Telesquare SKT LTE Router SDT-CS3B1 CSRF System Command Execution Intel Report: https://ift.tt/oWdiXnQ
Post summary
The post announces CVE‑2017‑20221 as a CSRF vulnerability allowing system command execution on Telesquare SKT LTE Router SDT‑CS3B1, with no PoC, exploit tool, or patch details provided.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | telesquare | sdt-cs3b1 | - | - | - |
| OS | telesquare | sdt-cs3b1_firmware | 1.2.0 | - | - |