CVE-2017-5262
In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the SNMP read-only (RO) community string has access to sensitive information by OID reference.
- Score
- CVSS 3.0 8.0 High
- Status
- Modified - cve@rapid7.com
- Published
- 2017-12-20
- Last modified
- 2024-08-05
- Weaknesses
- CWE-200
Affected products
- Cnpilot (Cambium Networks)
- Cnpilot E400 Firmware (Cambiumnetworks)
- Cnpilot E410 Firmware (Cambiumnetworks)
- Cnpilot E600 Firmware (Cambiumnetworks)
- Cnpilot R190n Firmware (Cambiumnetworks)
- Cnpilot R190v Firmware (Cambiumnetworks)
References
- https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/
