CVE-2017-5261 In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web administrative console expose a file path traversal vulnerability, accessible to a...
HighCVSS 8.8
EPSS 8.9%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web administrative console expose a file path traversal vulnerability, accessible to all authenticated users.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cambiumnetworks cnpilot r190v firmware | <= 4.3.2-r4 | No fix listed |
| cambiumnetworks cnpilot e410 firmware | <= 4.3.2-r4 | No fix listed |
| cambiumnetworks cnpilot r190n firmware | <= 4.3.2-r4 | No fix listed |
| cambiumnetworks cnpilot e400 firmware | <= 4.3.2-r4 | No fix listed |
| cambiumnetworks cnpilot e600 firmware | <= 4.3.2-r4 | No fix listed |
| cambium networks cnPilot | = 4.3.2-R4 and prior | No fix listed |
References
- blog.rapid7.com third-party-advisory