CVE-2017-5259

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/cnpilotrcmdexec.rb 2024-05-31 09:38:06+00:00| seen| MISP/d3fd7e8e-c7ec-41ca-87fe-462bb29963a6 2025-01-23 18:41:16+00:00| exploited|...

CVE-2017-5259

Cambium Networks cnPilot firmware versions 4.3.2-R4 and earlier are affected by CVE-2017-5259, which exposes an undocumented root-privilege admin web shell. The vulnerability is accessible via the HTTP path https:///adm/syscmd.asp and is described as a backdoor that allows execution of arbitrary ...

Cambium cnPilot r200/r201 Command Execution as 'root'

Cambium cnPilot r200/r201 device software versions 4.2.3-R4 to 4.3.3-R4, contain an undocumented, backdoor 'root' shell. This shell is accessible via a specific url, to any authenticated user. The module uses this shell to execute arbitrary system commands as 'root'. This module requires...