CVE-2017-5261

Name of the Vulnerable Software and Affected Versions Cambium Networks cnPilot firmware versions 4.3.2-R4 and prior

Description The issue affects the web administrative console of the firmware, where the 'ping' and 'traceroute' functions expose a file path traversal vulnerability. This vulnerability is accessible to all authenticated users.

Recommendations For versions 4.3.2-R4 and prior, consider restricting access to the 'ping' and 'traceroute' functions of the web administrative console until a patch is available. As a temporary workaround, limit the use of the web administrative console to necessary personnel only. At the moment, there is no information about a newer version that contains a fix for this vulnerability.