description: In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, an undocumented, root-privilege administration web shell is available using the HTTP path https://<device-ip-or-hostname>/adm/syscmd.asp.
problem types: CWE-489 (Leftover Debug Code)
affected:
{
product: cnPilot
vendor: Cambium Networks
versions:
status: affected, version: 4.3.2-R4 and prior
}