CVE-2017-5255

In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web management console allows any authenticated user (including the otherwise low-privilege readonly user) to inject shell meta-characters as part of a specially-crafted POST request to the get_chart function and run OS-level commands, effectively as root.

• CWE-78
• CWE-78

• https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/Third Party Advisory
• https://www.exploit-db.com/exploits/43413/Third Party Advisory, VDB Entry
• https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/Third Party Advisory
• https://www.exploit-db.com/exploits/43413/Third Party Advisory, VDB Entry

Published

Dec 20, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5246Biscom Secure File Transfer is vulnerable to AngularJS expre…
• CVE-2017-5247Biscom Secure File Transfer is vulnerable to cross-site scri…
• CVE-2017-5249In version 6.1.0.19 and prior of Wink Labs's Wink - Smart Ho…
• CVE-2017-5250In version 1.9.7 and prior of Insteon's Insteon for Hub Andr…
• CVE-2017-5251In version 1012 and prior of Insteon's Insteon Hub, the radi…
• CVE-2017-5254In version 3.5 and prior of Cambium Networks ePMP firmware, …
• CVE-2017-5256In version 3.5 and prior of Cambium Networks ePMP firmware, …
• CVE-2017-5257In version 3.5 and prior of Cambium Networks ePMP firmware, …
• CVE-2017-5258In version 3.5 and prior of Cambium Networks ePMP firmware, …
• CVE-2017-5259In versions 4.3.2-R4 and prior of Cambium Networks cnPilot f…
• CVE-2017-5260In versions 4.3.2-R4 and prior of Cambium Networks cnPilot f…
• CVE-2017-5261In versions 4.3.2-R4 and prior of Cambium Networks cnPilot f…