7.6high
CVE-2017-7922
An Improper Privilege Management issue was discovered in Cambium Networks ePMP.
Published 9 y ago · modified 4 mo ago · JSON
CVSS
7.6
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
9.6%
percentile 96%
Public exploits
0
none known
Summary
An Improper Privilege Management issue was discovered in Cambium Networks ePMP. The privileges for SNMP community strings are not properly restricted, which may allow an attacker to gain access to sensitive information and possibly allow for configuration changes.
Exploit prediction (EPSS)
9.64% probability of exploitation in the next 30 days, higher than 96% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 7.6 | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L |
| NVD | 2.0 | 6.5 | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Affected products
- n/a Cambium Networks ePMP
Classification
- Weakness
- CWE-269 Improper Privilege Management
References
- securityfocus.com /bid/99083 · vdb-entry, x_refsource_BID, x_transferred
- ics-cert.us-cert.gov /advisories/ICSA-17-166-01 · x_refsource_MISC, x_transferred
Sources
- CVE List: CVE-2017-7922
- NVD: CVE-2017-7922
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.