← Advisories

Telesquare SKT LTE Router SDT-CS3B1 Insecure Direct Object Reference Info Leak

Medium

Advisory ID

ZSL-2017-5445

Release Date

27 December 2017

Vendor

Telesquare Co., Ltd. - http://www.telesquare.co.kr

Affected Version

FwVer: SDT-CS3B1, sw version 1.2.0, LteVer: ML300S5XEA41_090 1 0.1.0, Modem model: PM-L300S

CVE

CVE-2017-20223

Tested On

lighttpd/1.4.20

Summary

We introduce SDT-CS3B1 LTE router which is a SKT 3G and 4G LTE wireless communication based LTE router product.

Description

Insecure direct object references occur when an application provides direct access to objects based on user-supplied input. As a result of this vulnerability attackers can bypass authorization and access resources and functionalities in the system.

Proof of Concept

sdt-cs3b1_idor.txtTXT

Disclosure Timeline

N/A

Credits

Vulnerability discovered by Gjoko Krstic

References

[1]https://www.exploit-db.com/exploits/43402/

[2]https://packetstormsecurity.com/files/145551

[3]https://cxsecurity.com/issue/WLB-2017120297

[4]https://exchange.xforce.ibmcloud.com/vulnerabilities/136993

[5]https://www.cve.org/CVERecord?id=CVE-2017-20223

Changelog

27.12.2017Initial release

04.01.2018Added reference [1], [2], [3] and [4]

24.03.2026Added reference [5]