high8.8
CVE-2017-5261
In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web administrative console expose a file path…
Impact
In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web administrative console expose a file path traversal vulnerability, accessible to all authenticated users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cambiumnetworks | Cnpilot R190v Firmware | through 4.3.2-r4 |
| Cambiumnetworks | Cnpilot E410 Firmware | through 4.3.2-r4 |
| Cambiumnetworks | Cnpilot R190n Firmware | through 4.3.2-r4 |
| Cambiumnetworks | Cnpilot E400 Firmware | through 4.3.2-r4 |
| Cambiumnetworks | Cnpilot E600 Firmware | through 4.3.2-r4 |