CVE-2017-5260

🗓️ 20 Dec 2017 22:00:00Reported by rapid7Type

Cambium Networks cnPilot firmware, versions 4.3.2-R4 and prior, allow low privilege user to access configuration file

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2017-5260	29 May 201815:50	–	circl
CNVD	Cambium Networks cnPilot Direct Object Reference Elevation of Privilege Vulnerability	21 Dec 201700:00	–	cnvd
Cvelist	CVE-2017-5260	20 Dec 201722:00	–	cvelist
Metasploit	Cambium cnPilot r200/r201 Login Scanner and Config Dump	18 Dec 201722:32	–	metasploit
NVD	CVE-2017-5260	20 Dec 201722:29	–	nvd
Packet Storm	Cambium CnPilot R200/r201 Login Scanner And Config Dump	1 Sep 202400:00	–	packetstorm
Prion	Design/Logic Flaw	20 Dec 201722:29	–	prion

NVD

Node

cambiumnetworks cnpilot_r190v_firmwareRange≤4.3.2-r4

AND

cambiumnetworks cnpilot_r190vMatch-

Node

cambiumnetworks cnpilot_e410_firmwareRange≤4.3.2-r4

AND

cambiumnetworks cnpilot_e410Match-

Node

cambiumnetworks cnpilot_r190n_firmwareRange≤4.3.2-r4

AND

cambiumnetworks cnpilot_r190nMatch-

Node

cambiumnetworks cnpilot_e400_firmwareRange≤4.3.2-r4

AND

cambiumnetworks cnpilot_e400Match-

Node

cambiumnetworks cnpilot_e600_firmwareRange≤4.3.2-r4

AND

cambiumnetworks cnpilot_e600Match-

[
  {
    "product": "cnPilot",
    "vendor": "Cambium Networks",
    "versions": [
      {
        "status": "affected",
        "version": "4.3.2-R4 and prior"
      }
    ]
  }
]

Source	Link
blog	www.blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/

13 May 2026 00:24Current

8.6High risk

Vulners AI Score8.6

CVSS 38.8

CVSS 29

EPSS0.33387