CVE-2017-20223

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2017-20223
Telesquare SKT LTE Router SDT-CS3B1 firmware version 1.2.0 contains an insecure direct object reference vulnerability that allows attackers to bypass authorization and access resources by manipulating user-supplied input parameters. Attackers can directly reference objects in the system to retrieve sensitive information and access functionalities without proper access controls.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://cxsecurity.com/issue/WLB-2017120297 Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/136993 Third Party Advisory
https://packetstormsecurity.com/files/145551 Third Party Advisory
https://www.exploit-db.com/exploits/43402/ Third Party Advisory VDB Entry
https://www.vulncheck.com/advisories/telesquare-skt-lte-router-sdt-cs3b1-insecure-direct-object-reference Third Party Advisory
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5445.php Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:telesquare:sdt-cs3b1_firmware:1.2.0:*:*:*:*:*:*:*
cpe:2.3:h:telesquare:sdt-cs3b1:-:*:*:*:*:*:*:*
History

14 Apr 2026, 16:57

Type Values Removed Values Added
Summary
  • (es) La versión de firmware 1.2.0 del Telesquare SKT LTE Router SDT-CS3B1 contiene una vulnerabilidad de referencia directa a objeto insegura que permite a los atacantes eludir la autorización y acceder a recursos manipulando parámetros de entrada proporcionados por el usuario. Los atacantes pueden referenciar directamente objetos en el sistema para recuperar información sensible y acceder a funcionalidades sin los controles de acceso adecuados.
First Time Telesquare
Telesquare sdt-cs3b1 Firmware
Telesquare sdt-cs3b1
CPE cpe:2.3:h:telesquare:sdt-cs3b1:-:*:*:*:*:*:*:*
cpe:2.3:o:telesquare:sdt-cs3b1_firmware:1.2.0:*:*:*:*:*:*:*
References () https://cxsecurity.com/issue/WLB-2017120297 - () https://cxsecurity.com/issue/WLB-2017120297 - Issue Tracking
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/136993 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/136993 - Third Party Advisory
References () https://packetstormsecurity.com/files/145551 - () https://packetstormsecurity.com/files/145551 - Third Party Advisory
References () https://www.exploit-db.com/exploits/43402/ - () https://www.exploit-db.com/exploits/43402/ - Third Party Advisory, VDB Entry
References () https://www.vulncheck.com/advisories/telesquare-skt-lte-router-sdt-cs3b1-insecure-direct-object-reference - () https://www.vulncheck.com/advisories/telesquare-skt-lte-router-sdt-cs3b1-insecure-direct-object-reference - Third Party Advisory
References () https://www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5445.php - () https://www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5445.php - Third Party Advisory

16 Mar 2026, 14:17

Type Values Removed Values Added
New CVE
Information

Published : 2026-03-16 14:17

Updated : 2026-06-17 01:15

NVD link : CVE-2017-20223

Mitre link : CVE-2017-20223

CVE.ORG link : CVE-2017-20223

JSON object : View

Products Affected

telesquare

  • sdt-cs3b1_firmware
  • sdt-cs3b1
CWE
CWE-639

Authorization Bypass Through User-Controlled Key