CVE-2017-5263: Cambiumnetworks Cnpilot e400 Firmware

High severity, CVSS 8.0. EPSS: 0.3% chance of exploitation in the next 30 days.

Versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware lack CSRF controls that can mitigate the effects of CSRF attacks, which are most typically implemented as randomized per-session tokens associated with any web application function, especially destructive ones.

Affected products

• Cambiumnetworks Cnpilot e400 Firmware: up to and including 4.3.2-r4
• Cambiumnetworks Cnpilot e410 Firmware: up to and including 4.3.2-r4
• Cambiumnetworks Cnpilot e600 Firmware: up to and including 4.3.2-r4
• Cambiumnetworks Cnpilot r190n Firmware: up to and including 4.3.2-r4
• Cambiumnetworks Cnpilot r190v Firmware: up to and including 4.3.2-r4

Published 2017-12-20. Last modified 2026-06-17.