Skip to content
OpenAdvisories
High ICSA-23-348-01 1 CVE

Cambium ePMP 5GHz Force 300-25 Radio (Update A)

Published Dec 14, 2023 · Updated Jan 9, 2024 · Revision 2

Vendor: Cambium Networks Product: ePMP Force 300-25

Summary

Successful exploitation of this vulnerability could allow an attacker to perform code execution on the affected product.

Vulnerabilities 1

  • High 7.8
    CVE-2023-6691

    Code Injection vulnerability in Cambium ePMP Force 300-25

    Cambium ePMP Force 300-25 version 4.7.0.1 is vulnerable to a code injection vulnerability that could allow an attacker to perform remote code execution and gain root privileges.

    Cambium Networks ePMP Force 300-25

Revision history

  1. #2

    Update A - Removed references to 'remote' code execution as the exploit occurs on a local device.

  2. #1

    Initial Publication

References