This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login.
Read the full analysis โ
Q1What is this vulnerability? (Essence + Consequences)
๐จ **Essence**: Arbitrary File Upload in Telesquare SKT LTE Router SDT-CS3B1. <br>๐ฅ **Consequences**: Attackers can upload malicious content, leading to full device compromise.โฆ
๐ฆ **Affected Product**: Telesquare SKT LTE Router **SDT-CS3B1**. <br>๐ **Version**: Specifically **1.2.0**. <br>๐ **Region**: Primarily used in South Korea (SKT network).
Q4What can hackers do? (Privileges/Data)
๐ **Attacker Actions**: Upload malicious scripts/files. <br>๐ **Privileges**: **Unauthenticated** access required. <br>๐ **Impact**: Full Control (C:H, I:H, A:H). Can execute commands, steal data, or disrupt service.
Q5Is exploitation threshold high? (Auth/Config)
โก **Exploitation Threshold**: **LOW**. <br>๐ **Auth**: None required (PR:N). <br>๐ **Network**: Remote (AV:N). <br>๐ฏ **Complexity**: Low (AC:L). Easy to exploit for anyone with network access.
Q6Is there a public Exp? (PoC/Wild Exploitation)
๐ข **Public Exploit**: Yes. <br>๐ **Sources**: Disclosed by **Zero Science Lab** (ZSL-2017-5446) and **VulnCheck**. <br>๐ **Status**: Advisory exists, indicating known exploitation vectors.
Q7How to self-check? (Features/Scanning)
๐ **Self-Check**: Scan for **WebDAV** services on port 80/443. <br>๐งช **Test**: Attempt to upload a test file (e.g., `.php` or `.jsp`) via WebDAV methods (PUT/MKCOL).โฆ
๐ ๏ธ **Official Fix**: Data does not list a specific patch date. <br>โ ๏ธ **Note**: Published date is listed as 2026-03-16 (likely a metadata anomaly, but advisory is from 2017).โฆ
๐ง **Workaround**: <br>1. **Disable WebDAV** if not needed. <br>2. **Restrict Access**: Use firewall rules to block external access to WebDAV ports. <br>3.โฆ