CVE-2017-7918

An Improper Access Control issue was discovered in Cambium Networks ePMP. After a valid user has used SNMP configuration export, an attacker is able to remotely trigger device configuration backups using specific MIBs. These backups lack proper access control and may allow access to sensitive information and possibly allow for configuration changes.

• CWE-284
• CWE-269

• http://www.securityfocus.com/bid/99083Third Party Advisory, US Government Resource
• https://ics-cert.us-cert.gov/advisories/ICSA-17-166-01Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/99083Third Party Advisory, US Government Resource
• https://ics-cert.us-cert.gov/advisories/ICSA-17-166-01Third Party Advisory, US Government Resource

Published

Jun 21, 2017

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-7912Hanwha Techwin SRN-4000, SRN-4000 firmware versions prior to…
• CVE-2017-7913A Plaintext Storage of a Password issue was discovered in Mo…
• CVE-2017-7914A Missing Authorization issue was discovered in Rockwell Aut…
• CVE-2017-7915An Improper Restriction of Excessive Authentication Attempts…
• CVE-2017-7916A Permissions, Privileges, and Access Controls issue was dis…
• CVE-2017-7917A Cross-Site Request Forgery issue was discovered in Moxa On…
• CVE-2017-7919An Improper Authentication issue was discovered in Newport X…
• CVE-2017-7920An Improper Authentication issue was discovered in ABB VSN30…
• CVE-2017-7921An Improper Authentication issue was discovered in Hikvision…9.8
• CVE-2017-7922An Improper Privilege Management issue was discovered in Cam…
• CVE-2017-7923A Password in Configuration File issue was discovered in Hik…
• CVE-2017-7924An Improper Input Validation issue was discovered in Rockwel…