CVE-2017-20222
Telesquare SKT LTE Router SDT-CS3B1 Unauthenticated Remote Reboot
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th
Telesquare SKT LTE Router SDT-CS3B1 software version 1.2.0 contains an unauthenticated remote reboot vulnerability that allows attackers to trigger device reboot without authentication. Attackers can send POST requests to the lte.cgi endpoint with the Command=Reboot parameter to cause denial of service by forcing the router to restart.
| CWE | CWE-306 |
| Vendor | telesquare |
| Product | sdt-cs3b1 |
| Published | Mar 16, 2026 |
| Last Updated | Apr 7, 2026 |
Stay Ahead of the Next One
Get instant alerts for telesquare sdt-cs3b1
Be the first to know when new high vulnerabilities affecting telesquare sdt-cs3b1 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected Versions
Telesquare / SDT-CS3B1
1.2.0
References
zeroscience.mk: https://www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5444.php cxsecurity.com: https://cxsecurity.com/issue/WLB-2017120300 packetstormsecurity.com: https://packetstormsecurity.com/files/145555 exploit-db.com: https://www.exploit-db.com/exploits/43401/ exchange.xforce.ibmcloud.com: https://exchange.xforce.ibmcloud.com/vulnerabilities/136825 vulncheck.com: https://www.vulncheck.com/advisories/telesquare-skt-lte-router-sdt-cs3b1-unauthenticated-remote-reboot
Credits
LiquidWorm as Gjoko Krstic of Zero Science Lab