TI-2022-01244 CVE-2022-1362 · GHSA-qg5x-rr96-mrpg
Cambium Networks cnMaestro OS Command Injection
Priority LOW 34
The affected On-Premise cnMaestro is vulnerable inside a specific route where a user can upload a crafted package to the system.
Vulnerabilities
7 records
TI-2022-01243 CVE-2022-1361 · GHSA-pv7g-j59c-549c
Cambium Networks cnMaestro SQL Injection
Priority LOW 37
The affected On-Premise cnMaestro is vulnerable to a pre-auth data exfiltration through improper neutralization of special elements used in an SQL command.
TI-2022-01242 CVE-2022-1360 · GHSA-f949-6354-j33r
Cambium Networks cnMaestro OS Command Injection
Priority MEDIUM 46
The affected On-Premise cnMaestro is vulnerable to execution of code on the cnMaestro hosting server.
TI-2022-01241 CVE-2022-1359 · GHSA-qpf9-w85c-45gv
Cambium Networks cnMaestro Path Traversal
Priority LOW 35
The affected On-Premise cnMaestro is vulnerable to an arbitrary file-write through improper limitation of a pathname to a restricted directory inside a specific route.
TI-2022-01240 CVE-2022-1358 · GHSA-fj8c-658h-qx6g
Cambium Networks cnMaestro SQL Injection
Priority LOW 37
The affected On-Premise is vulnerable to data exfiltration through improper neutralization of special elements used in an SQL command.
TI-2022-01238 CVE-2022-1356 · GHSA-wh7v-f6f5-qm4x
Cambium Networks cnMaestro use of Potentially Dangerous Function
Priority LOW 34
cnMaestro is vulnerable to a local privilege escalation.
TI-2022-01239 CVE-2022-1357 · GHSA-86hf-jfr6-r7p7
Cambium Networks cnMaestro OS Command Injection
Priority MEDIUM 52
The affected On-Premise cnMaestro allows an unauthenticated attacker to access the cnMaestro server and execute arbitrary code in the privileges of the web server.