CVE-2017-7922

CVE-2017-7922 describes an Improper Privilege Management vulnerability in Cambium Networks ePMP devices, including various ePMP 1000 and 2000 models, as well as ePMP Elevate. This flaw allows attackers to exploit improperly restricted SNMP community strings to gain access to sensitive information and potentially modify configurations. Rated 7.6 HIGH, the vulnerability is network-exploitable with low attack complexity, requiring low privileges to achieve high confidentiality impact and low integrity/availability impacts. While not actively exploited in the wild (KEV), a Metasploit module exists for SNMP enumeration, indicating readily available exploit code, though it has received minimal community discussion or media coverage.