CVE-2022-1360

Summary

The affected On-Premise cnMaestro is vulnerable to execution of code on the cnMaestro hosting server. This could allow a remote attacker to change server configuration settings.

Affected Software

VendorProductVersion RangeStatus
Cambium NetworkscnMaestrounspecified < 3.0.3-r32affected
Cambium NetworkscnMaestrounspecified < 2.4.2-r29affected
Cambium NetworkscnMaestrounspecified < 3.0.0-r34affected

Weaknesses

  • CWE-78: CWE-78 OS Command Injection

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References