CVE-2017-5261CWE-472

In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web administrative console expose a file path…

published December 20, 2017

CVSS
—
EPSS
9%
Percentile
95.2
In the wild
Unconfirmed
What it is

In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web administrative console expose a file path traversal vulnerability, accessible to all authenticated users.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08890 · 95.2th percentile
Weakness
CWE-472 · External Control of Assumed-Immutable Web Parameter
Published
2017-12-20T22:00Z
EPSS history
Timeline
  • 20 DEC 22:00Z
    In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web administrative console expose a file path…
    cvelistv5