CVE-2017-20224: Telesquare SKT LTE Router SDT-CS3B1 WebDAV Arbitrary File Upload
Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious content by exploiting enabled WebDAV HTTP methods. Attackers can use PUT, DELETE, MKCOL, MOVE, COPY, and PROPPATCH methods to upload executable code, delete files, or manipulate server content for remote code execution or denial of service.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-20224?
CVE-2017-20224 has been classified as a high severity vulnerability due to its potential for arbitrary file uploads by unauthenticated attackers.
How do I fix CVE-2017-20224?
To mitigate CVE-2017-20224, it is recommended to disable the WebDAV functionality on the Telesquare SKT LTE Router SDT-CS3B1.
Who is affected by CVE-2017-20224?
CVE-2017-20224 affects users of the Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 that have WebDAV HTTP methods enabled.
What type of attack can be performed using CVE-2017-20224?
CVE-2017-20224 allows attackers to perform arbitrary file uploads, which can lead to further exploitation of the device.
Is CVE-2017-20224 a remote or local vulnerability?
CVE-2017-20224 is considered a remote vulnerability as it can be exploited without any physical access to the device.