CVE-2017-5254CWE-284

In version 3.5 and prior of Cambium Networks ePMP firmware, the non-administrative users 'installer' and 'home' have the capability of changing passwords for…

published December 20, 2017

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.

CVSS

—

EPSS

54%

Percentile

99.0

In the wild

Unconfirmed

What it is

In version 3.5 and prior of Cambium Networks ePMP firmware, the non-administrative users 'installer' and 'home' have the capability of changing passwords for other accounts, including admin, after disabling a client-side protection mechanism.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.53704 · 99.0th percentile
Weakness: CWE-284 · Improper Access Control
Published: 2017-12-20T22:00Z

EPSS history

Timeline

20 DEC 22:00Z
In version 3.5 and prior of Cambium Networks ePMP firmware, the non-administrative users 'installer' and 'home' have the capability of changing passwords for…
cvelistv5