Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 17:40:07 +0000 cnvd-2018-01040 https://cve.radiocsirt.org/vuln/cnvd-2018-01040 cnvd-2018-01040 https://cve.radiocsirt.org/vuln/cnvd-2018-01040 EUVD-2026-73210 https://cve.radiocsirt.org/vuln/euvd-2026-73210 EUVD-2026-73210 https://cve.radiocsirt.org/vuln/euvd-2026-73210 fkie_cve-2017-5260 https://cve.radiocsirt.org/vuln/fkie_cve-2017-5260 <p>In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, although the option to access the configuration file is not available in the normal web administrative console for the &#39;user&#39; account, the configuration file is accessible via direct object reference (DRO) at http://&lt;device-ip-or-hostname&gt;/goform/down_cfg_file by this otherwise low privilege &#39;user&#39; account.</p> <p>In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, although the option to access the configuration file is not available in the normal web administrative console for the &#39;user&#39; account, the configuration file is accessible via direct object reference (DRO) at http://&lt;device-ip-or-hostname&gt;/goform/down_cfg_file by this otherwise low privilege &#39;user&#39; account.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-5260 GHSA-953p-8577-4q9f https://cve.radiocsirt.org/vuln/ghsa-953p-8577-4q9f <p>In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, although the option to access the configuration file is not available in the normal web administrative console for the &#39;user&#39; account, the configuration file is accessible via direct object reference (DRO) at http://&lt;device-ip-or-hostname&gt;/goform/down_cfg_file by this otherwise low privilege &#39;user&#39; account.</p> <p>In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, although the option to access the configuration file is not available in the normal web administrative console for the &#39;user&#39; account, the configuration file is accessible via direct object reference (DRO) at http://&lt;device-ip-or-hostname&gt;/goform/down_cfg_file by this otherwise low privilege &#39;user&#39; account.</p> https://cve.radiocsirt.org/vuln/ghsa-953p-8577-4q9f gsd-2017-5260 https://cve.radiocsirt.org/vuln/gsd-2017-5260 gsd-2017-5260 https://cve.radiocsirt.org/vuln/gsd-2017-5260