Privilege escalation in Cambium Networks Epmp 1000
CVE-2017-7918
An Improper Access Control issue was discovered in Cambium Networks ePMP. After a valid user has used SNMP configuration export, an attacker is able to remotely trigger device configuration backups using specific MIBs. These backups lack proper access control and may allow access to sensitive information and possibly allow for configuration changes.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L.
EPSS exploit prediction
EPSS: 0.067 (93.7th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 94th percentile — 93.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.067 · newest: 0.067 · change: 0.000
Affected products
- Cambium Networks Epmp 1000
- Cambium Networks Epmp 1000 Firmware
- Cambium Networks Epmp 1000 Hotspot
- Cambium Networks Epmp 1000 Hotspot Firmware
- Cambium Networks Epmp 2000
- Cambium Networks Epmp 2000 Firmware
- Cambium Networks Epmp Elevate
- Cambium Networks Epmp Elevate Firmware
- Cambium Networks Epmp — versions Cambium Networks ePMP
Weakness classification (CWE)
Public proof-of-concept exploits
References
- www.securityfocus.com/bid/99083 (US Government Resource, Third Party Advisory, vdb-entry)
- ics-cert.us-cert.gov/advisories/ICSA-17-166-01 (US Government Resource, Third Party Advisory)
Frequently asked questions
- What is CVE-2017-7918?
- CVE-2017-7918 is a medium-severity vulnerability in Cambium Networks Epmp 1000, classified under Improper Access Control. CVSS score: 6.8/10. Published 2017-06-21.
- How severe is CVE-2017-7918?
- Medium severity. CVSS v3 base score is 6.8 out of 10.
- Is CVE-2017-7918 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.