CVE-2017-20222

8.7 highEPSS 0.7%

High (8.7) in telesquare sdt-cs3b1 firmware. EPSS 0.7% chance of exploitation in the next 30 days.

Telesquare SKT LTE Router SDT-CS3B1 software version 1.2.0 contains an unauthenticated remote reboot vulnerability that allows attackers to trigger device reboot without authentication. Attackers can send POST requests to the lte.cgi endpoint with the Command=Reboot parameter to cause denial of service by forcing the router to restart.

Severity

CVSS 4.0

8.7 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2026-03-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

telesquare:sdt-cs3b1_firmware

References

https://cxsecurity.com/issue/WLB-2017120300
https://exchange.xforce.ibmcloud.com/vulnerabilities/136825
https://packetstormsecurity.com/files/145555
https://www.exploit-db.com/exploits/43401/
https://www.vulncheck.com/advisories/telesquare-skt-lte-router-sdt-cs3b1-unauthenticated-remote-reboot

Check your stack JSON