CVE-2017-5263CWE-352

Versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware lack CSRF controls that can mitigate the effects of CSRF attacks, which are most typically…

published December 20, 2017

CVSS
—
EPSS
0%
Percentile
21.3
In the wild
Unconfirmed
What it is

Versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware lack CSRF controls that can mitigate the effects of CSRF attacks, which are most typically implemented as randomized per-session tokens associated with any web application function, especially destructive ones.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00300 · 21.3th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2017-12-20T22:00Z
EPSS history
Timeline
  • 20 DEC 22:00Z
    Versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware lack CSRF controls that can mitigate the effects of CSRF attacks, which are most typically…
    cvelistv5