{"vulnerability": "CVE-2017-5260", "sightings": [{"uuid": "67a76260-afb0-4c33-8a7f-0b3d490b1e66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-5260", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:43.000000Z"}, {"uuid": "c4751d16-8ba5-4805-879d-9da188f2553e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-5260", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:57.000000Z"}, {"uuid": "d8988a62-e7d0-4c8f-a88d-38ed0618d86b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-5260", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/cnpilot_r_web_login_loot.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "ae87a109-0e94-41dc-82be-1434fcb83479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-5260", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/cnpilot_r_web_login_loot.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Karn Ganeshen \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module scans for Cambium cnPilot r200/r201 management login\\n          portal(s), attempts to identify valid credentials, and dump device\\n          configuration.\\n\\n          The device has at least two (2) users - admin and user. Due to an\\n          access control vulnerability, it is possible for 'user' account to access full\\n          device config. All information, including passwords, and keys, is stored\\n          insecurely, in clear-text form, thus allowing unauthorized admin access to any\\n          user.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/http/cnpilot_r_web_login_loot\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"Cambium cnPilot r200/r201 Login Scanner and Config Dump\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/scanner/http/cnpilot_r_web_login_loot.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/http/cnpilot_r_web_login_loot\", \"references\": [\"CVE-2017-5260\", \"URL-https://www.rapid7.com/blog/post/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:29.916748Z"}]}