Cambiumnetworks Cnpilot R190n Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Cambiumnetworks Cnpilot R190n Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2017-5259 — CVSS 8.8 (high): In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, an undocumented, root-privilege administration web shell is available…
• CVE-2017-5260 — CVSS 8.8 (high): In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, although the option to access the configuration file is not available…
• CVE-2017-5261 — CVSS 8.8 (high): In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web administrative…
• CVE-2017-5262 — CVSS 8.0 (high): In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the SNMP read-only (RO) community string has access to sensitive…
• CVE-2017-5263 — CVSS 8.0 (high): Versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware lack CSRF controls that can mitigate the effects of CSRF attacks, which…