CVE-2017-7918

Опубликовано: 21 июн. 2017

Источник: nvd

CVSS3: 6.8

CVSS2: 6

EPSS Средний

Описание

An Improper Access Control issue was discovered in Cambium Networks ePMP. After a valid user has used SNMP configuration export, an attacker is able to remotely trigger device configuration backups using specific MIBs. These backups lack proper access control and may allow access to sensitive information and possibly allow for configuration changes.

Ссылки

http://www.securityfocus.com/bid/99083
Third Party Advisory
US Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-17-166-01
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/99083
Third Party Advisory
US Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-17-166-01
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:cambium_networks:epmp_1000_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:cambium_networks:epmp_1000:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:cambium_networks:epmp_elevate_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:cambium_networks:epmp_elevate:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:cambium_networks:epmp_2000_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:cambium_networks:epmp_2000:-:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

cpe:2.3:o:cambium_networks:epmp_1000_hotspot_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:cambium_networks:epmp_1000_hotspot:-:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.42228

Средний

6.8 Medium

CVSS3

6 Medium

CVSS2

Дефекты

CWE-284

CWE-269

Связанные уязвимости

GHSA-m8gh-987p-hrf6

CVSS3: 6.8

github

больше 3 лет назад

EPSS

Процентиль: 97%

0.42228

Средний

6.8 Medium

CVSS3

6 Medium

CVSS2

Дефекты

CWE-284

CWE-269