What is CVE-2022-1358?

CVE-2022-1358 is a medium-severity vulnerability in Cambium Networks Cnmaestro, classified under SQL Injection. CVSS score: 5.9/10. Published 2022-05-17.

How severe is CVE-2022-1358?

Medium severity. CVSS v3 base score is 5.9 out of 10.

SQL Injection in Cambium Networks Cnmaestro

CVE-2022-1358

The affected On-Premise is vulnerable to data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate and dump all data held in the cnMaestro database.

Vulnerability class: SQL Injection

EPSS: 0.008 (53.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N.

Affected products

Cambium Networks Cnmaestro — versions unspecified
Cambiumnetworks Cnmaestro — versions 2.4.2, 3.0.0, 3.0.3

Weakness classification (CWE)

CWE-89 — SQL Injection

References

ics-cert@hq.dhs.gov (x_refsource_CONFIRM, US Government Resource, Third Party Advisory)

Frequently asked questions

What is CVE-2022-1358?: CVE-2022-1358 is a medium-severity vulnerability in Cambium Networks Cnmaestro, classified under SQL Injection. CVSS score: 5.9/10. Published 2022-05-17.
How severe is CVE-2022-1358?: Medium severity. CVSS v3 base score is 5.9 out of 10.