High ICSA-17-166-01 2 CVEs

Cambium Networks ePMP

Published Jun 15, 2017 · Updated Jun 15, 2017

Vendor: Cambium Networks Product: ePMP

Summary

ATTENTION: Remotely exploitable/low skill level to exploit.

Vulnerabilities 2

Unscored —

CVE-2017-7918 Public exploit

An Improper Access Control issue was discovered in Cambium Networks ePMP. After a valid user has used SNMP configuratio…

Jun 21, 2017
Unscored —

CVE-2017-7922 Public exploit

An Improper Privilege Management issue was discovered in Cambium Networks ePMP. The privileges for SNMP community strin…

Jun 21, 2017

Revision history

2017-06-15 #1
ICSA-17-166-01 Cambium Networks ePMP

References

ICS Advisory ICSA-17-166-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-17-166-01
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-17-166-01