{"id":"CVE-2023-6691","aliases":["EUVD-2023-58912","GHSA-x6q7-3r54-hvf2"],"status":"published","title":"Code Injection vulnerability in Cambium ePMP Force 300-25","description":"Cambium ePMP Force 300-25 version 4.7.0.1 is vulnerable to a code injection vulnerability that could allow an attacker to perform remote code execution and gain root privileges.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00431,"percentile":0.37537,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-94"],"published":"2023-12-18T17:52:12Z","modified":"2026-06-17T06:51:14Z","products":[{"vendor":"cambium","product":"epmp force 300-25"},{"vendor":"cambiumnetworks","product":"epmp_force_300-25_firmware"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-348-01","tags":["government-resource","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6691"},{"url":"https://github.com/advisories/GHSA-x6q7-3r54-hvf2"}],"sources":{"cve":[{"id":"CVE-2023-6691","title":"Code Injection vulnerability in Cambium ePMP Force 300-25","description":"\nCambium ePMP Force 300-25 version 4.7.0.1 is vulnerable to a code injection vulnerability that could allow an attacker to perform remote code execution and gain root privileges.\n\n\n\n\n","status":"published","published":"2023-12-18T17:52:12.574Z","modified":"2024-08-02T08:35:14.912Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:35:25.469654Z"}],"euvd":[{"id":"EUVD-2023-58912","description":"\nCambium ePMP Force 300-25 version 4.7.0.1 is vulnerable to a code injection vulnerability that could allow an attacker to perform remote code execution and gain root privileges.\n\n\n\n\n","status":"published","published":"2023-12-18T17:52:12Z","modified":"2024-08-02T08:35:14Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T03:50:10.17189Z"}],"ghsa":[{"id":"GHSA-x6q7-3r54-hvf2","title":"\nCambium ePMP Force 300-25 version 4.7.0.1 is vulnerable to a code injection vulnerability that...","description":"\nCambium ePMP Force 300-25 version 4.7.0.1 is vulnerable to a code injection vulnerability that could allow an attacker to perform remote code execution and gain root privileges.\n\n\n\n\n","status":"published","published":"2023-12-18T18:30:21Z","modified":"2023-12-18T18:31:27Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:55:14.600975Z"}],"nvd":[{"id":"CVE-2023-6691","description":"\nCambium ePMP Force 300-25 version 4.7.0.1 is vulnerable to a code injection vulnerability that could allow an attacker to perform remote code execution and gain root privileges.\n\n\n\n\n","status":"published","published":"2023-12-18T18:15:08.12Z","modified":"2026-06-17T06:51:14.92Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:08:56.329586Z"}]}}