CVE-2017-20223

Telesquare SKT LTE Router SDT-CS3B1 firmware version 1.2.0 contains an insecure direct object reference vulnerability that allows attackers to bypass authorization and access resources by manipulating user-supplied input parameters. Attackers can directly reference objects in the system to retrieve sensitive information and access functionalities without proper access controls.

• CWE-639

• https://cxsecurity.com/issue/WLB-2017120297Issue Tracking
• https://exchange.xforce.ibmcloud.com/vulnerabilities/136993Third Party Advisory
• https://packetstormsecurity.com/files/145551Third Party Advisory
• https://www.exploit-db.com/exploits/43402/Third Party Advisory, VDB Entry
• https://www.vulncheck.com/advisories/telesquare-skt-lte-router-sdt-cs3b1-insecure-direct-object-referenceThird Party Advisory
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5445.phpThird Party Advisory

Published

Mar 16, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-20218Serviio PRO 1.8 contains an unquoted search path vulnerabili…8.5
• CVE-2017-20219Serviio PRO 1.8 DLNA Media Streaming Server contains a DOM-b…6.1
• CVE-2017-2022Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-20220Serviio PRO 1.8 contains an improper access control vulnerab…8.7
• CVE-2017-20221Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 contains a…3.5
• CVE-2017-20222Telesquare SKT LTE Router SDT-CS3B1 software version 1.2.0 c…8.7
• CVE-2017-20224Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 contains a…9.8
• CVE-2017-20225TiEmu 2.08 and prior contains a stack-based buffer overflow …9.8
• CVE-2017-20226Mapscrn 2.0.3 contains a stack-based buffer overflow vulnera…8.6
• CVE-2017-20227JAD Java Decompiler 1.5.8e-1kali1 and prior contains a stack…9.8
• CVE-2017-20228Flat Assembler 1.71.21 contains a stack-based buffer overflo…7.8
• CVE-2017-20229MAWK 1.3.3-17 and prior contains a stack-based buffer overfl…9.8