PT-2017-3175 · Cambium Networks · Cnpilot R200/201

Publicado 2017-03-10 · Atualizado 2021-05-11 · CVE-2017-5859

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cambium Networks cnPilot R200/201 versions prior to 4.3

Description The issue involves errors in managing RSA keys, which can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of data. It is related to the device's certificate and its RSA keys.

Recommendations For versions prior to 4.3, update to version 4.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the device to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-320

Identificadores relacionados

BDU:2017-02591

CVE-2017-5859

Produtos afetados

Cnpilot R200/201

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-5859 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-5859 · Aviso do Fabricante
• https://support.cambiumnetworks.com/file/3f88842a39f37b0d4ce5d43e5aa21bf1c4f9f1ca · Nota
• https://bdu.fstec.ru/vul/2017-02591 · Nota de Segurança