CVE-2017-20224 - Vulnerability Analysis

Overview

Telesquare SKT LTE Router SDT-CS3B1 1.2.0 contains an unrestricted file upload vulnerability caused by enabled WebDAV HTTP methods, letting unauthenticated attackers upload malicious files and manipulate server content for remote code execution or denial of service.

Severity & Score

Impact

Unauthenticated attackers can upload malicious files, execute code remotely, or cause denial of service, compromising the router's security and availability.

Mitigation

Update to the latest version that disables or properly secures WebDAV HTTP methods.

References

• https://cxsecurity.com/issue/WLB-2017120301
• https://www.vulncheck.com/advisories/telesquare-skt-lte-router-sdt-cs3b1-webdav-arbitrary-file-upload
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5446.php

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner