CVE-2017-20224 — AI Deep Analysis Summary

🚨 **Essence**: Arbitrary File Upload in Telesquare SKT LTE Router SDT-CS3B1. <br>💥 **Consequences**: Attackers can upload malicious content, leading to full device compromise.…

🛡️ **Root Cause**: **CWE-434** (Unrestricted Upload of File with Dangerous Type).…

📦 **Affected Product**: Telesquare SKT LTE Router **SDT-CS3B1**. <br>📅 **Version**: Specifically **1.2.0**. <br>🌍 **Region**: Primarily used in South Korea (SKT network).

💀 **Attacker Actions**: Upload malicious scripts/files. <br>🔓 **Privileges**: **Unauthenticated** access required. <br>📊 **Impact**: Full Control (C:H, I:H, A:H). Can execute commands, steal data, or disrupt service.

⚡ **Exploitation Threshold**: **LOW**. <br>🔑 **Auth**: None required (PR:N). <br>🌐 **Network**: Remote (AV:N). <br>🎯 **Complexity**: Low (AC:L). Easy to exploit for anyone with network access.

📢 **Public Exploit**: Yes. <br>📝 **Sources**: Disclosed by **Zero Science Lab** (ZSL-2017-5446) and **VulnCheck**. <br>🔍 **Status**: Advisory exists, indicating known exploitation vectors.

🔍 **Self-Check**: Scan for **WebDAV** services on port 80/443. <br>🧪 **Test**: Attempt to upload a test file (e.g., `.php` or `.jsp`) via WebDAV methods (PUT/MKCOL).…

🛠️ **Official Fix**: Data does not list a specific patch date. <br>⚠️ **Note**: Published date is listed as 2026-03-16 (likely a metadata anomaly, but advisory is from 2017).…

🚧 **Workaround**: <br>1. **Disable WebDAV** if not needed. <br>2. **Restrict Access**: Use firewall rules to block external access to WebDAV ports. <br>3.…

🔥 **Urgency**: **CRITICAL**. <br>📉 **Priority**: **P1**. <br>💡 **Reason**: Unauthenticated, remote code execution potential via simple file upload. Immediate mitigation required to prevent device takeover.