Telesquare SKT LTE Router SDT-CS3B1 Remote Reboot Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the Telesquare SKT LTE Router SDT-CS3B1, specifically in the software version 1.2.0. This vulnerability allows for unauthenticated remote rebooting of the device, which can disrupt service by forcing the router to restart. Exploitation involves sending POST requests to the lte.cgi endpoint with the Command=Reboot parameter.

Impact

Exploitation of this vulnerability causes the router to reboot, leading to a temporary disruption of service.

Reproduction

The vulnerability can be reproduced by sending a POST request to the lte.cgi endpoint with the Command parameter set to Reboot. This can be done manually or automated with a script that sends repeated requests at intervals.