CVE-2017-5259 In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, an undocumented, root-privilege administration web shell is available using the HTTP path https://<device-ip-or-hostname>/adm/syscm...
HighCVSS 8.8
EPSS 33.3%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, an undocumented, root-privilege administration web shell is available using the HTTP path https://<device-ip-or-hostname>/adm/syscmd.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cambiumnetworks cnpilot r190v firmware | <= 4.3.2-r4 | No fix listed |
| cambiumnetworks cnpilot e410 firmware | <= 4.3.2-r4 | No fix listed |
| cambiumnetworks cnpilot r190n firmware | <= 4.3.2-r4 | No fix listed |
| cambiumnetworks cnpilot e400 firmware | <= 4.3.2-r4 | No fix listed |
| cambiumnetworks cnpilot e600 firmware | <= 4.3.2-r4 | No fix listed |
| cambium networks cnPilot | = 4.3.2-R4 and prior | No fix listed |
References
- blog.rapid7.com third-party-advisory