CVE-2017-20221

🗓️ 16 Mar 2026 01:28:24Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 9 Views🌐 WEB

Cross site forgery in Telesquare SKT LTE Router allows authenticated attackers to run system commands.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2017-20221	16 Mar 202601:28	–	attackerkb
CNNVD	Telesquare SKT LTE Router SDT-CS3B1 跨站请求伪造漏洞	16 Mar 202600:00	–	cnnvd
Cvelist	CVE-2017-20221 Telesquare SKT LTE Router SDT-CS3B1 CSRF System Command Execution	16 Mar 202601:28	–	cvelist
EUVD	EUVD-2017-18936	16 Mar 202615:30	–	euvd
NVD	CVE-2017-20221	16 Mar 202614:17	–	nvd
OpenVAS	Telesquare SKT LTE Router SDT-CS3B1 Multiple Vulnerabilities - Active Check	28 Dec 201700:00	–	openvas
Positive Technologies	PT-2026-25739	16 Mar 202600:00	–	ptsecurity
RedhatCVE	CVE-2017-20221	26 Mar 202615:13	–	redhatcve
Vulnrichment	CVE-2017-20221 Telesquare SKT LTE Router SDT-CS3B1 CSRF System Command Execution	16 Mar 202601:28	–	vulnrichment
Zero Science Lab	Telesquare SKT LTE Router SDT-CS3B1 CSRF System Command Execution	27 Dec 201700:00	–	zeroscience

NVD

Vulners

CNA

Node

telesquare sdt-cs3b1_firmwareMatch1.2.0

AND

telesquare sdt-cs3b1Match-

[
  {
    "vendor": "Telesquare",
    "product": "SDT-CS3B1",
    "versions": [
      {
        "version": "1.2.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/136839
vulncheck	www.vulncheck.com/advisories/telesquare-skt-lte-router-sdt-cs3b1-csrf-system-command-execution
packetstormsecurity	www.packetstormsecurity.com/files/145550
cxsecurity	www.cxsecurity.com/issue/WLB-2017120299
exploit-db	www.exploit-db.com/exploits/43400/
zeroscience	www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5443.php

Parameter	Position	Path	Description	CWE
Command	request body	/cgi-bin/admin.cgi	CSRF PoC shows form submitting to admin CGI with command parameters enabling system command execution.	CWE-352
Cmd	request body	/cgi-bin/admin.cgi	CSRF PoC shows form submitting to admin CGI with command parameters enabling system command execution.	CWE-352
T	request body	/cgi-bin/admin.cgi	CSRF PoC shows form submitting to admin CGI with command parameters enabling system command execution.	CWE-352

17 Jun 2026 01:15Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.13.5 - 4.3

CVSS 45.3

EPSS0.00286

SSVC

CWE-352