8

CVE-2017-5262

In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the SNMP read-only (RO) community string has access to sensitive information by OID reference.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cambiumnetworks ≫ Cnpilot R190v Firmware Version <= 4.3.2-r4
   Cambiumnetworks ≫ Cnpilot R190v Version-
Cambiumnetworks ≫ Cnpilot E410 Firmware Version <= 4.3.2-r4
   Cambiumnetworks ≫ Cnpilot E410 Version-
Cambiumnetworks ≫ Cnpilot R190n Firmware Version <= 4.3.2-r4
   Cambiumnetworks ≫ Cnpilot R190n Version-
Cambiumnetworks ≫ Cnpilot E400 Firmware Version <= 4.3.2-r4
   Cambiumnetworks ≫ Cnpilot E400 Version-
Cambiumnetworks ≫ Cnpilot E600 Firmware Version <= 4.3.2-r4
   Cambiumnetworks ≫ Cnpilot E600 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.84% 0.916
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8 2.1 5.9
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.7 5.1 10
AV:A/AC:L/Au:S/C:C/I:C/A:C
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.