CVE-2017-20222: Telesquare SKT LTE Router SDT-CS3B1 Unauthenticated Remote Reboot

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2026-03-16 · updated 2026-06-17
Weakness: CWE-306

Description

Telesquare SKT LTE Router SDT-CS3B1 software version 1.2.0 contains an unauthenticated remote reboot vulnerability that allows attackers to trigger device reboot without authentication. Attackers can send POST requests to the lte.cgi endpoint with the Command=Reboot parameter to cause denial of service by forcing the router to restart.

Affected products

Telesquare SDT-CS3B1: 1.2.0

References

https://cxsecurity.com/issue/WLB-2017120300
https://exchange.xforce.ibmcloud.com/vulnerabilities/136825
https://packetstormsecurity.com/files/145555
https://www.exploit-db.com/exploits/43401/
https://www.vulncheck.com/advisories/telesquare-skt-lte-router-sdt-cs3b1-unauthenticated-remote-reboot
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5444.php

Get alerted when CVE-2017-20222 or the next vulnerability affects your stack