CVE-2022-1358: medium-severity vulnerability in Cambium Networks cnMaestro
Cambium Networks cnMaestro SQL Injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.9epss 0.9%
The affected On-Premise is vulnerable to data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate and dump all data held in the cnMaestro database.
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
Affected products
Cambium Networks · cnMaestroRelated CVEs — Cambium Networks cnMaestro
In the same product, most dangerous first.
CVE-2022-1360HIGHCambium Networks cnMaestro OS Command InjectionEPSS 1.9%CVE-2022-1357CRITICALCambium Networks cnMaestro OS Command InjectionEPSS 1.8%CVE-2022-1359MEDIUMCambium Networks cnMaestro Path TraversalEPSS 1.0%CVE-2022-1361HIGHCambium Networks cnMaestro SQL InjectionEPSS 1.0%CVE-2022-1362MEDIUMCambium Networks cnMaestro OS Command InjectionEPSS 0.8%CVE-2022-1356HIGHCambium Networks cnMaestro use of Potentially Dangerous FunctionEPSS 0.3%