6.8med
CVE-2017-79181 exploit
An Improper Access Control issue was discovered in Cambium Networks ePMP.
Published 9 y ago · modified 4 mo ago · JSON
CVSS
6.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
6.7%
percentile 94%
Public exploits
1
Metasploit
Summary
An Improper Access Control issue was discovered in Cambium Networks ePMP. After a valid user has used SNMP configuration export, an attacker is able to remotely trigger device configuration backups using specific MIBs. These backups lack proper access control and may allow access to sensitive information and possibly allow for configuration changes.
Exploit prediction (EPSS)
6.65% probability of exploitation in the next 30 days, higher than 94% of all scored CVEs.
Exploits and detections
- Metasploit auxiliary/scanner/snmp/epmp1000_snmp_loot Cambium ePMP 1000 SNMP Enumeration · metasploit auxiliary, normal rank
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 6.8 | CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L |
| NVD | 2.0 | 6.0 | AV:N/AC:M/Au:S/C:P/I:P/A:P |
Affected products
- n/a Cambium Networks ePMP
Classification
References
- securityfocus.com /bid/99083 · vdb-entry, x_refsource_BID, x_transferred
- ics-cert.us-cert.gov /advisories/ICSA-17-166-01 · x_refsource_MISC, x_transferred
Sources
- CVE List: CVE-2017-7918
- NVD: CVE-2017-7918
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.