Cambiumnetworks Cnmaestro
7 CVEs affecting Cambiumnetworks Cnmaestro. Latest disclosed: 2022-05-17. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-1357 | Critical | 9.8 | 2022-05-17 | The affected On-Premise cnMaestro allows an unauthenticated attacker to access the cnMaestro server and execute arbitrary code in the privileges of the web ser… |
CVE-2022-1360 | High | 8.2 | 2022-05-17 | The affected On-Premise cnMaestro is vulnerable to execution of code on the cnMaestro hosting server. This could allow a remote attacker to change server confi… |
CVE-2022-1361 | High | 7.4 | 2022-05-17 | The affected On-Premise cnMaestro is vulnerable to a pre-auth data exfiltration through improper neutralization of special elements used in an SQL command. Thi… |
CVE-2022-1356 | High | 7.1 | 2022-05-17 | cnMaestro is vulnerable to a local privilege escalation. By default, a user does not have root privileges. However, a user can run scripts as sudo, which could… |
CVE-2022-1358 | Medium | 5.9 | 2022-05-17 | The affected On-Premise is vulnerable to data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an atta… |
CVE-2022-1359 | Medium | 5.7 | 2022-05-17 | The affected On-Premise cnMaestro is vulnerable to an arbitrary file-write through improper limitation of a pathname to a restricted directory inside a specifi… |
CVE-2022-1362 | Medium | 5.0 | 2022-05-17 | The affected On-Premise cnMaestro is vulnerable inside a specific route where a user can upload a crafted package to the system. An attacker could abuse this u… |