CWE Code: 319
Vulnerability Type: privilege_escalation
CVSS Score: 9.0
CWE Name:  Cleartext Transmission of Sensitive Information
Summary: in versions 4.3.2-r4 and prior of cambium networks cnpilot firmware, an undocumented, root-privilege administration web shell is available using the http path https://<device-ip-or-hostname>/adm/syscmd.asp.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2017-12-20
Last Modified Date: 2019-10-09