CVE-2017-20223

🗓️ 16 Mar 2026 01:28:26Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 7 Views🌐 WEB

Firmware 1.2.0 on Telesquare router enables authorization bypass via insecure direct object references.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2017-20223	16 Mar 202601:28	–	attackerkb
Circl	CVE-2017-20223	16 Jun 202612:37	–	circl
CNNVD	Telesquare SKT LTE Router SDT-CS3B1 安全漏洞	16 Mar 202600:00	–	cnnvd
Cvelist	CVE-2017-20223 Telesquare SKT LTE Router SDT-CS3B1 Insecure Direct Object Reference	16 Mar 202601:28	–	cvelist
EUVD	EUVD-2017-18939	16 Mar 202615:30	–	euvd
NVD	CVE-2017-20223	16 Mar 202614:17	–	nvd
OpenVAS	Telesquare SKT LTE Router SDT-CS3B1 Multiple Vulnerabilities - Active Check	28 Dec 201700:00	–	openvas
Positive Technologies	PT-2026-25741	16 Mar 202600:00	–	ptsecurity
RedhatCVE	CVE-2017-20223	26 Mar 202615:04	–	redhatcve
Vulnrichment	CVE-2017-20223 Telesquare SKT LTE Router SDT-CS3B1 Insecure Direct Object Reference	16 Mar 202601:28	–	vulnrichment

NVD

Vulners

CNA

Node

telesquare sdt-cs3b1_firmwareMatch1.2.0

AND

telesquare sdt-cs3b1Match-

[
  {
    "vendor": "Telesquare",
    "product": "SDT-CS3B1",
    "versions": [
      {
        "version": "1.2.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
exploit-db	www.exploit-db.com/exploits/43402/
cxsecurity	www.cxsecurity.com/issue/WLB-2017120297
vulncheck	www.vulncheck.com/advisories/telesquare-skt-lte-router-sdt-cs3b1-insecure-direct-object-reference
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/136993
zeroscience	www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5445.php
packetstormsecurity	www.packetstormsecurity.com/files/145551

Parameter	Position	Path	Description	CWE
Command	query param	/cgi-bin/lte.cgi?Command=getUiccState	Insecure direct object references exposure via query parameter Command to retrieve UICC state.	CWE-639
Command	query param	/cgi-bin/lte.cgi?Command=getModemStatus	Insecure direct object references exposure via query parameter Command to retrieve modem status.	CWE-639
Command	query param	/cgi-bin/systemutil.cgi?Command=SystemInfo	Insecure direct object references exposure via query parameter Command to retrieve system information.	CWE-639

17 Jun 2026 01:15Current

5.8Medium risk

Vulners AI Score5.8

CVSS 49.3

CVSS 3.19.8

EPSS0.00524

SSVC

CWE-639