high8.0
CVE-2017-5263
Versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware lack CSRF controls that can mitigate the effects of CSRF attacks, which are most typically imp…
Impact
Versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware lack CSRF controls that can mitigate the effects of CSRF attacks, which are most typically implemented as randomized per-session tokens associated with any web application function, especially destructive ones.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cambiumnetworks | Cnpilot R190v Firmware | through 4.3.2-r4 |
| Cambiumnetworks | Cnpilot E410 Firmware | through 4.3.2-r4 |
| Cambiumnetworks | Cnpilot R190n Firmware | through 4.3.2-r4 |
| Cambiumnetworks | Cnpilot E400 Firmware | through 4.3.2-r4 |
| Cambiumnetworks | Cnpilot E600 Firmware | through 4.3.2-r4 |