Lucene search
Rapid7CVELIST:CVE-2017-5258HistoryDec 20, 2017 - 10:00 p.m.
CVE-2017-5258
2017-12-2022:00:00
CWE-79
rapid7
www.cve.org
0.0005 Low
EPSS
Percentile
17.6%
In version 3.5 and prior of Cambium Networks ePMP firmware, an attacker who knows or can guess the RW community string can provide a URL for a configuration file over SNMP with XSS strings in certain SNMP OIDs, serve it via HTTP, and the affected device will perform a configuration restore using the attacker’s supplied config file, including the inserted XSS strings.
CNA Affected
[
{
"product": "ePMP",
"vendor": "Cambium Networks",
"versions": [
{
"status": "affected",
"version": "3.5 and prior"
}
]
}
]Related
prion
prion
Cross site scripting
2017-12-20 22:29:00
nvd
nvd
CVE-2017-5258
2017-12-20 22:29:00
cve
cve
CVE-2017-5258
2017-12-20 22:29:00