Privilege escalation in Cambium Networks Epmp 1000
CVE-2017-7922
An Improper Privilege Management issue was discovered in Cambium Networks ePMP. The privileges for SNMP community strings are not properly restricted, which may allow an attacker to gain access to sensitive information and possibly allow for configuration changes.
Vulnerability class: Privilege Escalation
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.6 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L.
EPSS exploit prediction
EPSS: 0.096 (95.4th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 95th percentile — 95.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.096 · newest: 0.096 · change: 0.000
Affected products
- Cambium Networks Epmp 1000
- Cambium Networks Epmp 1000 Firmware
- Cambium Networks Epmp 1000 Hotspot
- Cambium Networks Epmp 1000 Hotspot Firmware
- Cambium Networks Epmp 2000
- Cambium Networks Epmp 2000 Firmware
- Cambium Networks Epmp Elevate
- Cambium Networks Epmp Elevate Firmware
- Cambium Networks Epmp — versions Cambium Networks ePMP
Weakness classification (CWE)
Public proof-of-concept exploits
References
- www.securityfocus.com/bid/99083 (US Government Resource, Third Party Advisory, vdb-entry)
- ics-cert.us-cert.gov/advisories/ICSA-17-166-01 (US Government Resource, Third Party Advisory)
Frequently asked questions
- What is CVE-2017-7922?
- CVE-2017-7922 is a high-severity vulnerability in Cambium Networks Epmp 1000, classified under Improper Privilege Management. CVSS score: 7.6/10. Published 2017-06-21.
- How severe is CVE-2017-7922?
- High severity. CVSS v3 base score is 7.6 out of 10.
- Is CVE-2017-7922 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.