Back to search
CVE-2017-5260
Published: Dec 20, 2017
Modified: Aug 5, 2024
PUBLISHED
Description
In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, although the option to access the configuration file is not available in the normal web administrative console for the 'user' account, the configuration file is accessible via direct object reference (DRO) at http://<device-ip-or-hostname>/goform/down_cfg_file by this otherwise low privilege 'user' account.
| Vendor | Product | Versions |
|---|---|---|
Cambium Networks | cnPilot | affected 4.3.2-R4 and prior |
Weaknesses (CWE)
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now