Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware lack CSRF controls that can mitigate the effects of CSRF attacks, which are most typically implemented as randomized per-session tokens associated with any web application function, especially destructive ones.
CVSS Information
N/A
Vulnerability Type
跨站请求伪造(CSRF)
Vulnerability Title
Cambium Networks cnPilot 安全漏洞
Vulnerability Description
Cambium Networks cnPilot是美国Cambium Networks公司的一款支持云管理单频路由器产品。 使用4.3.2-R4及之前版本固件的Cambium Networks cnPilot存在安全漏洞，该漏洞源于缺少跨站请求伪造控制。攻击者可利用该漏洞获取或更改管理员密码，从而控制设备和整个WiFi网络。
CVSS Information
N/A
Vulnerability Type
N/A