Privilege escalation in Cambium Networks Epmp 1000
CVE-2017-7918
An Improper Access Control issue was discovered in Cambium Networks ePMP. After a valid user has used SNMP configuration export, an attacker is able to remotely trigger device configuration backups using specific MIBs. These backups lack proper access control and may allow access to sensitive information and possibly allow for configuration changes.
EPSS: 0.067 (93.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L.
Affected products
- Cambium_networks Epmp_1000
- Cambium_networks Epmp_1000_firmware
- Cambium_networks Epmp_1000_hotspot
- Cambium_networks Epmp_1000_hotspot_firmware
- Cambium_networks Epmp_2000
- Cambium_networks Epmp_2000_firmware
- Cambium_networks Epmp_elevate
- Cambium_networks Epmp_elevate_firmware
- N/a Cambium Networks Epmp — versions Cambium Networks ePMP
Weakness classification (CWE)
Public proof-of-concept exploits
References
- ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, vdb-entry, x_refsource_BID)
- ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2017-7918?
- CVE-2017-7918 is a medium-severity vulnerability in Cambium Networks Epmp 1000, classified under Improper Access Control. CVSS score: 6.8/10. Published 2017-06-21.
- How severe is CVE-2017-7918?
- Medium severity. CVSS v3 base score is 6.8 out of 10.
- Is CVE-2017-7918 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.