CVEvulnerability
CVE-2017-7922
7.6 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-06-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.6 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-269
Description
An Improper Privilege Management issue was discovered in Cambium Networks ePMP. The privileges for SNMP community strings are not properly restricted, which may allow an attacker to gain access to sensitive information and possibly allow for configuration changes.
Affected configurations
• cambium networks epmp 1000 firmware
• cambium networks epmp elevate firmware
• cambium networks epmp 2000 firmware
• cambium networks epmp 1000 hotspot firmware
Related
Weakness · CWE (1)
- CWE-269 Improper Privilege Management weakness
References
- http://www.securityfocus.com/bid/99083 Third Party Advisory, US Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-17-166-01 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/99083 Third Party Advisory, US Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-17-166-01 Third Party Advisory, US Government Resource