CVE-2017-5259

🗓️ 20 Dec 2017 22:00:00Reported by rapid7Type

cve🔗 web.nvd.nist.gov👁 96 Views🌐 WEB

Cambium Networks cnPilot firmware root-privilege web shell vulnerabilit

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2017-5259	29 May 201815:50	–	circl
CNVD	Cambium Networks cnPilot Backdoor Access Elevation of Privilege Vulnerability	21 Dec 201700:00	–	cnvd
Cvelist	CVE-2017-5259	20 Dec 201722:00	–	cvelist
Metasploit	Cambium cnPilot r200/r201 Command Execution as 'root'	18 Dec 201722:32	–	metasploit
NVD	CVE-2017-5259	20 Dec 201722:29	–	nvd
OSV	CVE-2017-5259	20 Dec 201722:29	–	osv
Packet Storm	Cambium CnPilot R200/r201 Command Execution	31 Aug 202400:00	–	packetstorm
Prion	Path traversal	20 Dec 201722:29	–	prion
Positive Technologies	PT-2017-16427	20 Dec 201700:00	–	ptsecurity
The Hacker News	Mirai Botnet Variant Exploits Four-Faith Router Vulnerability for DDoS Attacks	8 Jan 202510:29	–	thn

NVD

Node

cambiumnetworks cnpilot_r190v_firmwareRange≤4.3.2-r4

AND

cambiumnetworks cnpilot_r190vMatch-

Node

cambiumnetworks cnpilot_e410_firmwareRange≤4.3.2-r4

AND

cambiumnetworks cnpilot_e410Match-

Node

cambiumnetworks cnpilot_r190n_firmwareRange≤4.3.2-r4

AND

cambiumnetworks cnpilot_r190nMatch-

Node

cambiumnetworks cnpilot_e400_firmwareRange≤4.3.2-r4

AND

cambiumnetworks cnpilot_e400Match-

Node

cambiumnetworks cnpilot_e600_firmwareRange≤4.3.2-r4

AND

cambiumnetworks cnpilot_e600Match-

[
  {
    "product": "cnPilot",
    "vendor": "Cambium Networks",
    "versions": [
      {
        "status": "affected",
        "version": "4.3.2-R4 and prior"
      }
    ]
  }
]

Source	Link
blog	www.blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/

Parameter	Position	Path	Description	CWE
command	path	/goform/SystemCommand	POST to execute command via the backdoor root shell.	CWE-319, CWE-489
SystemCommandSubmit	path	/goform/SystemCommand	POST to execute command via the backdoor root shell.	CWE-319, CWE-489

13 May 2026 00:24Current

8.6High risk

Vulners AI Score8.6

CVSS 38.8

CVSS 29

EPSS0.6634