CVE-2017-5259: vulnerability in Cambium Networks cnPilot
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
52Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 33%
from disclosure to weapon
Published on NVDDec 20
VulnCheck+2205d
In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, an undocumented, root-privilege administration web shell is available using the HTTP path https://<device-ip-or-hostname>/adm/syscmd.asp.
Affected products
Cambium Networks · cnPilotRelated CVEs — Cambium Networks cnPilot
In the same product, most dangerous first.