CVE-2017-5263

🗓️ 20 Dec 2017 22:00:00Reported by rapid7Type

Cambium Networks cnPilot firmware <4.3.2-R4 lacks CSRF control

Reporter	Title	Published	Views	Family All 6
CNVD	Cambium Networks cnPilot Cross-Site Request Forgery Vulnerability	21 Dec 201700:00	–	cnvd
Cvelist	CVE-2017-5263	20 Dec 201722:00	–	cvelist
EUVD	EUVD-2017-14368	7 Oct 202500:30	–	euvd
NVD	CVE-2017-5263	20 Dec 201722:29	–	nvd
OSV	CVE-2017-5263	20 Dec 201722:29	–	osv
Prion	Cross site request forgery (csrf)	20 Dec 201722:29	–	prion

NVD

Node

cambiumnetworks cnpilot_r190v_firmwareRange≤4.3.2-r4

AND

cambiumnetworks cnpilot_r190vMatch-

Node

cambiumnetworks cnpilot_e410_firmwareRange≤4.3.2-r4

AND

cambiumnetworks cnpilot_e410Match-

Node

cambiumnetworks cnpilot_r190n_firmwareRange≤4.3.2-r4

AND

cambiumnetworks cnpilot_r190nMatch-

Node

cambiumnetworks cnpilot_e400_firmwareRange≤4.3.2-r4

AND

cambiumnetworks cnpilot_e400Match-

Node

cambiumnetworks cnpilot_e600_firmwareRange≤4.3.2-r4

AND

cambiumnetworks cnpilot_e600Match-

[
  {
    "product": "cnPilot",
    "vendor": "Cambium Networks",
    "versions": [
      {
        "status": "affected",
        "version": "4.3.2-R4 and prior"
      }
    ]
  }
]

Source	Link
blog	www.blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/

13 May 2026 00:24Current

7.8High risk

Vulners AI Score7.8

CVSS 25.4

CVSS 38

EPSS0.00039

CWE-352