Sdt Cs3b1 EUVD-2017-18936

The CVSS vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N indicates network-accessible attack vector with low complexity but requires prior authentication (PR:L), no user interaction needed (UI:N), and impacts only integrity with low severity. While the integrity impact is rated low, the actual risk is contextually higher: command execution on router firmware typically grants system-level access far beyond the stated 'integrity' impact. The moderate CVSS score of 4.3 understates the threat; however, exploitation requires an authenticated attacker or social engineering of an admin user to visit a malicious webpage. No widespread exploitation has been reported in CISA KEV catalogs or major threat intelligence feeds, and no public proof-of-concept code is known to be circulating. For organizations still running version 1.2.0 devices in production, this represents a real but not critical risk—prioritize patching within normal maintenance windows rather than emergency response, but do not deprioritize indefinitely.

An attacker identifies that a network administrator at a target organization uses Telesquare SDT-CS3B1 routers. The attacker crafts a malicious webpage containing hidden image tags or JavaScript that issue HTTP requests to the router's admin interface (e.g., /cgi-bin/admin?action=execute_command). When the administrator visits the attacker's webpage (via phishing, malvertising, or a compromised legitimate site), the forged requests execute in the context of the administrator's authenticated session, allowing the attacker to modify router configuration, install backdoors in the device firmware, redirect traffic, or extract sensitive network data. No additional user interaction (such as clicking a button) is required beyond visiting the page, making this a high-confidence exploitation path in organizations where admin access is shared or where administrators browse untrusted content.