CVE-2022-1358
5.9
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
Summary
The affected On-Premise is vulnerable to data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate and dump all data held in the cnMaestro database.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Cambium Networks | cnMaestro | unspecified < 3.0.3-r32 | affected |
| Cambium Networks | cnMaestro | unspecified < 2.4.2-r29 | affected |
| Cambium Networks | cnMaestro | unspecified < 3.0.0-r34 | affected |
Weaknesses
- CWE-89: CWE-89 SQL Injection
ADP Enrichment
CVE Program Container
Additional References
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: total
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.