Goal Reached Thanks to every supporter โ€” we hit 100%!

Goal: 1000 CNY ยท Raised: 1336 CNY

100%

CVE-2017-20224 โ€” AI Deep Analysis Summary

CVSS 9.8 ยท Critical

Q1What is this vulnerability? (Essence + Consequences)

๐Ÿšจ **Essence**: Arbitrary File Upload in Telesquare SKT LTE Router SDT-CS3B1. <br>๐Ÿ’ฅ **Consequences**: Attackers can upload malicious content, leading to full device compromise.โ€ฆ

Q2Root Cause? (CWE/Flaw)

๐Ÿ›ก๏ธ **Root Cause**: **CWE-434** (Unrestricted Upload of File with Dangerous Type).โ€ฆ

Q3Who is affected? (Versions/Components)

๐Ÿ“ฆ **Affected Product**: Telesquare SKT LTE Router **SDT-CS3B1**. <br>๐Ÿ“… **Version**: Specifically **1.2.0**. <br>๐ŸŒ **Region**: Primarily used in South Korea (SKT network).

Q4What can hackers do? (Privileges/Data)

๐Ÿ’€ **Attacker Actions**: Upload malicious scripts/files. <br>๐Ÿ”“ **Privileges**: **Unauthenticated** access required. <br>๐Ÿ“Š **Impact**: Full Control (C:H, I:H, A:H). Can execute commands, steal data, or disrupt service.

Q5Is exploitation threshold high? (Auth/Config)

โšก **Exploitation Threshold**: **LOW**. <br>๐Ÿ”‘ **Auth**: None required (PR:N). <br>๐ŸŒ **Network**: Remote (AV:N). <br>๐ŸŽฏ **Complexity**: Low (AC:L). Easy to exploit for anyone with network access.

Q6Is there a public Exp? (PoC/Wild Exploitation)

๐Ÿ“ข **Public Exploit**: Yes. <br>๐Ÿ“ **Sources**: Disclosed by **Zero Science Lab** (ZSL-2017-5446) and **VulnCheck**. <br>๐Ÿ” **Status**: Advisory exists, indicating known exploitation vectors.

Q7How to self-check? (Features/Scanning)

๐Ÿ” **Self-Check**: Scan for **WebDAV** services on port 80/443. <br>๐Ÿงช **Test**: Attempt to upload a test file (e.g., `.php` or `.jsp`) via WebDAV methods (PUT/MKCOL).โ€ฆ

Q8Is it fixed officially? (Patch/Mitigation)

๐Ÿ› ๏ธ **Official Fix**: Data does not list a specific patch date. <br>โš ๏ธ **Note**: Published date is listed as 2026-03-16 (likely a metadata anomaly, but advisory is from 2017).โ€ฆ

Q9What if no patch? (Workaround)

๐Ÿšง **Workaround**: <br>1. **Disable WebDAV** if not needed. <br>2. **Restrict Access**: Use firewall rules to block external access to WebDAV ports. <br>3.โ€ฆ

Q10Is it urgent? (Priority Suggestion)

๐Ÿ”ฅ **Urgency**: **CRITICAL**. <br>๐Ÿ“‰ **Priority**: **P1**. <br>๐Ÿ’ก **Reason**: Unauthenticated, remote code execution potential via simple file upload. Immediate mitigation required to prevent device takeover.