Read the docs

Telesquare

Records25All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical16CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

Telesquare records in CISA KEV

No Telesquare vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tlr-2005ksh Firmware 17 records HIGH Sdt-cs3b1 Firmware 6 records CRITICAL Tlr-2855ks6 Firmware 2 records HIGH Sdt-cw3b1 Firmware 1 record MEDIUM

Records

6 records in Sdt-cs3b1 Firmware · all components

TI-2017-14290 CVE-2017-20224 · GHSA-h2cv-xxpj-4w3f

Telesquare SKT LTE Router SDT-CS3B1 WebDAV Arbitrary File Upload

Priority HIGH 81

Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious content by exploiting enabled WebDAV HTTP methods.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01081 Published 2026-03-16 No fix listed CWE-434
TI-2017-14289 CVE-2017-20223 · GHSA-hc2g-56j9-8384

Telesquare SKT LTE Router SDT-CS3B1 Insecure Direct Object Reference

Priority HIGH 81

Telesquare SKT LTE Router SDT-CS3B1 firmware version 1.2.0 contains an insecure direct object reference vulnerability that allows attackers to bypass authorization and access resources by manipulating user-supplied input…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00545 Published 2026-03-16 No fix listed CWE-639
TI-2017-14288 CVE-2017-20222 · GHSA-fgv6-prj5-5cx3

Telesquare SKT LTE Router SDT-CS3B1 Unauthenticated Remote Reboot

Priority HIGH 77

Telesquare SKT LTE Router SDT-CS3B1 software version 1.2.0 contains an unauthenticated remote reboot vulnerability that allows attackers to trigger device reboot without authentication.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00734 Published 2026-03-16 No fix listed CWE-306
TI-2017-14287 CVE-2017-20221 · GHSA-98cj-p4cp-mf8h

Telesquare SKT LTE Router SDT-CS3B1 CSRF System Command Execution

Priority MEDIUM 57

Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 contains a cross-site request forgery vulnerability that allows authenticated attackers to execute arbitrary system commands by exploiting missing request validation.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00298 Published 2026-03-16 No fix listed CWE-352
Open these records in search →