CVE:CVE-2017-5259
CNNVD:CNNVD-201701-408
Cambium Networks cnPilot是美国Cambium Networks公司的一款支持云管理单频路由器产品。
使用4.3.2-R4及之前版本固件的Cambium Networks cnPilot存在安全漏洞。攻击者可通过使用https://&lt;device&gt;/adm/syscmd.asp HTTP路径利用该漏洞访问Web shell。
solution:Upgrade cambiumnetworks cnpilot_r190v_firmware to a higher version than 4.3.2-r4,and avoid the version (,4.3.2-r4]; Upgrade cambiumnetworks cnpilot_e410_firmware to a higher version than 4.3.2-r4,and avoid the version (,4.3.2-r4]; Upgrade cambiumnetworks cnpilot_r190n_firmware to a higher version than 4.3.2-r4,and avoid the version (,4.3.2-r4]; Upgrade cambiumnetworks cnpilot_e400_firmware to a higher version than 4.3.2-r4,and avoid the version (,4.3.2-r4]; Upgrade cambiumnetworks cnpilot_e600_firmware to a higher version than 4.3.2-r4,and avoid the version (,4.3.2-r4]