ByteOS Network

NVD Vulnerability Details :

CVE-2017-5258

Modified

Source-cve@rapid7.com

Published At-20 Dec, 2017 | 22:29

Updated At-13 May, 2026 | 00:24

In version 3.5 and prior of Cambium Networks ePMP firmware, an attacker who knows or can guess the RW community string can provide a URL for a configuration file over SNMP with XSS strings in certain SNMP OIDs, serve it via HTTP, and the affected device will perform a configuration restore using the attacker's supplied config file, including the inserted XSS strings.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	5.4	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Primary	2.0	3.5	LOW	AV:N/AC:M/Au:S/C:N/I:P/A:N

Type: Primary

Version: 3.0

Base score: 5.4

Base severity: MEDIUM

Vector:

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Type: Primary

Version: 2.0

Base score: 3.5

Base severity: LOW

Vector:

AV:N/AC:M/Au:S/C:N/I:P/A:N

CPE Matches

cambiumnetworks>>epmp_1000_firmware>>Versions up to 3.5(inclusive)

cpe:2.3:o:cambiumnetworks:epmp_1000_firmware:*:*:*:*:*:*:*:*

cambiumnetworks>>epmp_1000>>-

cpe:2.3:h:cambiumnetworks:epmp_1000:-:*:*:*:*:*:*:*

cambiumnetworks>>epmp_2000_firmware>>Versions up to 3.5(inclusive)

cpe:2.3:o:cambiumnetworks:epmp_2000_firmware:*:*:*:*:*:*:*:*

cambiumnetworks>>epmp_2000>>-

cpe:2.3:h:cambiumnetworks:epmp_2000:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-79	Secondary	cve@rapid7.com
CWE-79	Primary	nvd@nist.gov

CWE ID: CWE-79

Type: Secondary

Source: cve@rapid7.com

CWE ID: CWE-79

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/	cve@rapid7.com	Exploit Third Party Advisory VDB Entry
https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/	af854a3a-2127-422b-91ae-364da2661108	Exploit Third Party Advisory VDB Entry

Hyperlink: https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/

Source: cve@rapid7.com

Resource:

Exploit

Third Party Advisory

VDB Entry

Hyperlink: https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit

Third Party Advisory

VDB Entry

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History