CVE-2017-20223 PUBLISHED

Telesquare SKT LTE Router SDT-CS3B1 firmware version 1.2.0 contains an insecure direct object reference vulnerability that allows attackers to bypass authorization and access resources by manipulating user-supplied input parameters. Attackers can directly reference objects in the system to retrieve sensitive information and access functionalities without proper access controls.

• LiquidWorm as Gjoko Krstic of Zero Science Lab finder

• Zero Science Lab Disclosure
• Exploit DB
• Packet Storm Security
• CXSecurity
• IBM X-Force Exchange
• VulnCheck Advisory: Telesquare SKT LTE Router SDT-CS3B1 Insecure Direct Object Reference

• Authorization Bypass Through User-Controlled Key CWE