Vendors / Cambiumnetworks Records 21 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 14
Exploited now Cambiumnetworks records in CISA KEV No Cambiumnetworks vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 52
The affected On-Premise cnMaestro allows an unauthenticated attacker to access the cnMaestro server and execute arbitrary code in the privileges of the web server.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01823 · Published 2022-05-17 · Fixed in 3.0.3-r32, 2.4.2-r29 +1 CWE-78
Priority MEDIUM 46
The affected On-Premise cnMaestro is vulnerable to execution of code on the cnMaestro hosting server.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01924 · Published 2022-05-17 · Fixed in 3.0.3-r32, 2.4.2-r29 +1 CWE-78
Priority LOW 37
The affected On-Premise cnMaestro is vulnerable to a pre-auth data exfiltration through improper neutralization of special elements used in an SQL command.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00965 · Published 2022-05-17 · Fixed in 3.0.3-r32, 2.4.2-r29 +1 CWE-89
Priority LOW 37
The affected On-Premise is vulnerable to data exfiltration through improper neutralization of special elements used in an SQL command.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0088 · Published 2022-05-17 · Fixed in 3.0.3-r32, 2.4.2-r29 +1 CWE-89
Priority LOW 35
The affected On-Premise cnMaestro is vulnerable to an arbitrary file-write through improper limitation of a pathname to a restricted directory inside a specific route.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00985 · Published 2022-05-17 · Fixed in 3.0.3-r32, 2.4.2-r29 +1 CWE-78
Priority LOW 34
The affected On-Premise cnMaestro is vulnerable inside a specific route where a user can upload a crafted package to the system.
CVSS 3.1 HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.00816 · Published 2022-05-17 · Fixed in 3.0.3-r32, 2.4.2-r29 +1 CWE-78
Priority LOW 34
cnMaestro is vulnerable to a local privilege escalation.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00275 · Published 2022-05-17 · Fixed in 3.0.3-r32, 2.4.2-r29 +1 CWE-78
Open these records in search → All records by CVSS severity
3 14 4 0 0
THREATIST.IORead the docs