CVE-2022-1357: critical vulnerability in Cambium Networks cnMaestro
Cambium Networks cnMaestro OS Command Injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.8epss 1.8%
The affected On-Premise cnMaestro allows an unauthenticated attacker to access the cnMaestro server and execute arbitrary code in the privileges of the web server. This lack of validation could allow an attacker to append arbitrary data to the logger command.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Cambium Networks · cnMaestroRelated CVEs — Cambium Networks cnMaestro
In the same product, most dangerous first.
CVE-2022-1360HIGHCambium Networks cnMaestro OS Command InjectionEPSS 1.9%CVE-2022-1359MEDIUMCambium Networks cnMaestro Path TraversalEPSS 1.0%CVE-2022-1361HIGHCambium Networks cnMaestro SQL InjectionEPSS 1.0%CVE-2022-1358MEDIUMCambium Networks cnMaestro SQL InjectionEPSS 0.9%CVE-2022-1362MEDIUMCambium Networks cnMaestro OS Command InjectionEPSS 0.8%CVE-2022-1356HIGHCambium Networks cnMaestro use of Potentially Dangerous FunctionEPSS 0.3%