CVE-2017-5254

In version 3.5 and prior of Cambium Networks ePMP firmware, the non-administrative users 'installer' and 'home' have the capability of changing passwords for other accounts, including admin, after disabling a client-side protection mechanism.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:cambiumnetworks:epmp_1000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:cambiumnetworks:epmp_1000:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:cambiumnetworks:epmp_2000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:cambiumnetworks:epmp_2000:-:*:*:*:*:*:*:*

Information

Published : 2017-12-20 14:29

Updated : 2019-10-09 16:28


NVD link : CVE-2017-5254

Mitre link : CVE-2017-5254


JSON object : View

CWE
CWE-269

Improper Privilege Management

Advertisement

dedicated server usa

Products Affected

cambiumnetworks

  • epmp_1000_firmware
  • epmp_1000
  • epmp_2000
  • epmp_2000_firmware