Privilege escalation in Cambium Networks Epmp 1000
CVE-2017-7922
An Improper Privilege Management issue was discovered in Cambium Networks ePMP. The privileges for SNMP community strings are not properly restricted, which may allow an attacker to gain access to sensitive information and possibly allow for configuration changes.
Vulnerability class: Privilege Escalation
EPSS: 0.096 (95.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.6 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L.
Affected products
- Cambium_networks Epmp_1000
- Cambium_networks Epmp_1000_firmware
- Cambium_networks Epmp_1000_hotspot
- Cambium_networks Epmp_1000_hotspot_firmware
- Cambium_networks Epmp_2000
- Cambium_networks Epmp_2000_firmware
- Cambium_networks Epmp_elevate
- Cambium_networks Epmp_elevate_firmware
- N/a Cambium Networks Epmp — versions Cambium Networks ePMP
Weakness classification (CWE)
Public proof-of-concept exploits
References
- ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, vdb-entry, x_refsource_BID)
- ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2017-7922?
- CVE-2017-7922 is a high-severity vulnerability in Cambium Networks Epmp 1000, classified under Improper Privilege Management. CVSS score: 7.6/10. Published 2017-06-21.
- How severe is CVE-2017-7922?
- High severity. CVSS v3 base score is 7.6 out of 10.
- Is CVE-2017-7922 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.