CVE-2017-5259
High
Description
In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, an undocumented, root-privilege administration web shell is available using the HTTP path https://<device-ip-or-hostname>/adm/syscmd.asp.
SeverityHigh
CVSS8.8
Exploit probability—
ProductCambiumnetworks Cnpilot R190v Firmware
PublishedDec 20, 2017
First seenDec 20, 2017
Weakness typeCWE-489CWE-489
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cambiumnetworks cnpilot_r190v_firmware | v ≤ 4.3.2-r4 | — |
| cambiumnetworks cnpilot_e410_firmware | v ≤ 4.3.2-r4 | — |
| cambiumnetworks cnpilot_r190n_firmware | v ≤ 4.3.2-r4 | — |
| cambiumnetworks cnpilot_e400_firmware | v ≤ 4.3.2-r4 | — |
| cambiumnetworks cnpilot_e600_firmware | v ≤ 4.3.2-r4 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.