{"id":"CVE-2017-7922","aliases":["EUVD-2017-16893","GHSA-jhjv-8qfc-cgj4"],"status":"published","title":"An Improper Privilege Management issue was discovered in Cambium Networks ePMP. The privileges...","description":"An Improper Privilege Management issue was discovered in Cambium Networks ePMP. The privileges for SNMP community strings are not properly restricted, which may allow an attacker to gain access to sensitive information and possibly allow for configuration changes.","severity":{"version":"3.0","score":7.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.09639,"percentile":0.95521,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-269"],"published":"2017-06-21T19:00:00Z","modified":"2026-06-17T01:25:29Z","exploits":[{"source":"metasploit","id":"auxiliary/scanner/snmp/epmp1000_snmp_loot","title":"Cambium ePMP 1000 SNMP Enumeration","type":"auxiliary","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/scanner/snmp/epmp1000_snmp_loot"}],"products":[{"vendor":"cambium_networks","product":"epmp_1000_firmware"},{"vendor":"cambium_networks","product":"epmp_1000_hotspot_firmware"},{"vendor":"cambium_networks","product":"epmp_2000_firmware"},{"vendor":"cambium_networks","product":"epmp_elevate_firmware"}],"references":[{"url":"http://www.securityfocus.com/bid/99083","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-17-166-01","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7922"},{"url":"https://github.com/advisories/GHSA-jhjv-8qfc-cgj4"}],"sources":{"cve":[{"id":"CVE-2017-7922","description":"An Improper Privilege Management issue was discovered in Cambium Networks ePMP. The privileges for SNMP community strings are not properly restricted, which may allow an attacker to gain access to sensitive information and possibly allow for configuration changes.","status":"published","published":"2017-06-21T19:00:00Z","modified":"2024-08-05T16:19:29.327Z","cwes":["CWE-269"],"updated_at":"2026-11-02T14:33:20.488433Z"}],"euvd":[{"id":"EUVD-2017-16893","description":"An Improper Privilege Management issue was discovered in Cambium Networks ePMP. The privileges for SNMP community strings are not properly restricted, which may allow an attacker to gain access to sensitive information and possibly allow for configuration changes.","status":"published","published":"2017-06-21T19:00:00Z","modified":"2024-08-05T16:19:29Z","updated_at":"2026-11-03T02:39:06.470138Z"}],"ghsa":[{"id":"GHSA-jhjv-8qfc-cgj4","title":"An Improper Privilege Management issue was discovered in Cambium Networks ePMP. The privileges...","description":"An Improper Privilege Management issue was discovered in Cambium Networks ePMP. The privileges for SNMP community strings are not properly restricted, which may allow an attacker to gain access to sensitive information and possibly allow for configuration changes.","status":"published","published":"2022-05-13T01:36:14Z","modified":"2023-02-01T05:08:35Z","cvss":[{"version":"3.0","score":7.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","level":"high"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:50:48.372333Z"}],"nvd":[{"id":"CVE-2017-7922","description":"An Improper Privilege Management issue was discovered in Cambium Networks ePMP. The privileges for SNMP community strings are not properly restricted, which may allow an attacker to gain access to sensitive information and possibly allow for configuration changes.","status":"published","published":"2017-06-21T19:29:00.433Z","modified":"2026-06-17T01:25:29.143Z","cvss":[{"version":"3.0","score":7.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:03:50.782497Z"}]}}