Cambium Networks cnMaestro
Successful exploitation of these vulnerabilities could allow an attacker to gain remote code execution, sensitive data exfiltration, and complete takeover of the main multi-tenant cloud infrastructure.
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-1362US | high7.3 | — | ||
The affected On-Premise cnMaestro is vulnerable inside a specific route where a user can upload a crafted package to the system. An attacker could abuse this user-controlled data t… | ||||
| CVE-2022-1361US | high7.5 | — | ||
The affected On-Premise cnMaestro is vulnerable to a pre-auth data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an atta… | ||||
| CVE-2022-1360US | critical9.8 | — | ||
The affected On-Premise cnMaestro is vulnerable to execution of code on the cnMaestro hosting server. This could allow a remote attacker to change server configuration settings. | ||||
| CVE-2022-1359US | high7.5 | — | ||
The affected On-Premise cnMaestro is vulnerable to an arbitrary file-write through improper limitation of a pathname to a restricted directory inside a specific route. If an attack… | ||||
| CVE-2022-1358US | high7.5 | — | ||
The affected On-Premise is vulnerable to data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate an… | ||||
| CVE-2022-1357US | critical9.8 | — | ||
The affected On-Premise cnMaestro allows an unauthenticated attacker to access the cnMaestro server and execute arbitrary code in the privileges of the web server. This lack of val… | ||||
| CVE-2022-1356US | high7.8 | — | ||
cnMaestro is vulnerable to a local privilege escalation. By default, a user does not have root privileges. However, a user can run scripts as sudo, which could allow an attacker to… | ||||
references
External citations — patches, advisories, analysis.
remediations (7)
- MitigationcnMaestro On-Premises
Cambium Networks recommends affected users apply one of the following upgrade packages: 2.4.2-r29
- MitigationcnMaestro On-Premises
Cambium Networks recommends affected users apply one of the following upgrade packages: 2.4.2-r29
- MitigationcnMaestro On-Premises
Cambium Networks recommends affected users apply one of the following upgrade packages: 2.4.2-r29
- MitigationcnMaestro On-Premises
Cambium Networks recommends affected users apply one of the following upgrade packages: 2.4.2-r29
- MitigationcnMaestro On-Premises
Cambium Networks recommends affected users apply one of the following upgrade packages: 2.4.2-r29
- MitigationcnMaestro On-Premises
Cambium Networks recommends affected users apply one of the following upgrade packages: 2.4.2-r29
- MitigationcnMaestro On-Premises
Cambium Networks recommends affected users apply one of the following upgrade packages: 2.4.2-r29
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan