Security Advisory

CVE-2017-5259

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-12-20 22:00:00

Last updated 2024-08-05 14:55:35

Assigner rapid7

CVSS score not scored

State PUBLISHED

Description

In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, an undocumented, root-privilege administration web shell is available using the HTTP path https://<device-ip-or-hostname>/adm/syscmd.asp.

← Browse all CVEs View on cve.org ↗