Skip to content
OpenAdvisories

Vendor

Cambium Networks

18 known vulnerabilities.

Cambium Networks at a glance

Last 12 months
0
Critical · all time
1
Exploited · all time
0
Public exploit · all time
6
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

cnMaestro 7 ePMP 5 cnPilot 5 ePMP Force 300-25 1 cnMaestro On-Premises 0

Latest advisories

  • High max 9.0
    WID-SEC-2024-1578 1 CVE rev. 39

    RADIUS: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

    Ein lokaler Angreifer kann eine Schwachstelle im RADIUS Protokoll ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

    Oracle IBM Cisco Red Hat Siemens Linux
    first Jul 9, 2024
  • Critical
    WID-SEC-2025-0185 0 CVEs

    Cambium Networks cnPilot und cnMaestro: Schwachstelle ermöglicht Codeausführung

    Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Cambium Networks cnMaestro und Cambium Networks cnPilot ausnutzen, um beliebigen Code auszuführen.

    Cambium Networks
  • High max 7.8
    ICSA-23-348-01 1 CVE rev. 2

    Cambium ePMP 5GHz Force 300-25 Radio (Update A)

    Successful exploitation of this vulnerability could allow an attacker to perform code execution on the affected product.

    Cambium Networks
    first Dec 14, 2023
  • Critical max 9.8
    ICSA-22-132-04 7 CVEs

    Cambium Networks cnMaestro

    Successful exploitation of these vulnerabilities could allow an attacker to gain remote code execution, sensitive data exfiltration, and complete takeover of the main multi-tenant cloud infrastructure.

    Cambium Networks
  • High
    ICSA-17-166-01 2 CVEs

    Cambium Networks ePMP

    ATTENTION: Remotely exploitable/low skill level to exploit.

    Cambium Networks
All Critical High Medium Low Exploited only Public exploit

18 results · Feed

  • High 7.8
    CVE-2023-6691

    Code Injection vulnerability in Cambium ePMP Force 300-25

    Cambium ePMP Force 300-25 version 4.7.0.1 is vulnerable to a code injection vulnerability that could allow an attacker to perform remote code execution and gain root privileges.

    Cambium Networks ePMP Force 300-25
  • Medium 5.0
    CVE-2022-1362

    Cambium Networks cnMaestro OS Command Injection

    The affected On-Premise cnMaestro is vulnerable inside a specific route where a user can upload a crafted package to the system. An attacker could abuse this user-controlled data to execute arbitrary commands on the server.

    Cambium Networks cnMaestro
  • High 7.4
    CVE-2022-1361

    Cambium Networks cnMaestro SQL Injection

    The affected On-Premise cnMaestro is vulnerable to a pre-auth data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate data about other user’s accounts and devices.

    Cambium Networks cnMaestro
  • High 8.2
    CVE-2022-1360

    Cambium Networks cnMaestro OS Command Injection

    The affected On-Premise cnMaestro is vulnerable to execution of code on the cnMaestro hosting server. This could allow a remote attacker to change server configuration settings.

    Cambium Networks cnMaestro
  • Medium 5.7
    CVE-2022-1359

    Cambium Networks cnMaestro Path Traversal

    The affected On-Premise cnMaestro is vulnerable to an arbitrary file-write through improper limitation of a pathname to a restricted directory inside a specific route. If an attacker supplied path traversal charters (../) as part of a filename, the server wil…

    Cambium Networks cnMaestro
  • Medium 5.9
    CVE-2022-1358

    Cambium Networks cnMaestro SQL Injection

    The affected On-Premise is vulnerable to data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate and dump all data held in the cnMaestro database.

    Cambium Networks cnMaestro
  • High 7.1
    CVE-2022-1356

    Cambium Networks cnMaestro use of Potentially Dangerous Function

    cnMaestro is vulnerable to a local privilege escalation. By default, a user does not have root privileges. However, a user can run scripts as sudo, which could allow an attacker to gain root privileges when running user scripts outside allowed commands.

    Cambium Networks cnMaestro
  • Critical 9.8
    CVE-2022-1357

    Cambium Networks cnMaestro OS Command Injection

    The affected On-Premise cnMaestro allows an unauthenticated attacker to access the cnMaestro server and execute arbitrary code in the privileges of the web server. This lack of validation could allow an attacker to append arbitrary data to the logger command.

    Cambium Networks cnMaestro
  • Unscored —
    CVE-2017-5259 Public exploit EPSS 33%

    In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, an undocumented, root-privilege administration web…

    Cambium Networks cnPilot
  • Unscored —
    CVE-2017-5255 Public exploit EPSS 74%

    In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the we…

    Cambium Networks ePMP
  • Unscored —
    CVE-2017-5256

    In version 3.5 and prior of Cambium Networks ePMP firmware, all authenticated users have the ability to update the Devi…

    Cambium Networks ePMP
  • Unscored —
    CVE-2017-5254 Public exploit EPSS 52%

    In version 3.5 and prior of Cambium Networks ePMP firmware, the non-administrative users 'installer' and 'home' have th…

    Cambium Networks ePMP
  • Unscored —
    CVE-2017-5263

    Versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware lack CSRF controls that can mitigate the effects of CS…

    Cambium Networks cnPilot
  • Unscored —
    CVE-2017-5258

    In version 3.5 and prior of Cambium Networks ePMP firmware, an attacker who knows or can guess the RW community string …

    Cambium Networks ePMP
  • Unscored —
    CVE-2017-5262 Public exploit

    In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the SNMP read-only (RO) community string has acces…

    Cambium Networks cnPilot
  • Unscored —
    CVE-2017-5261 Public exploit

    In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web a…

    Cambium Networks cnPilot
  • Unscored —
    CVE-2017-5260 Public exploit

    In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, although the option to access the configuration fi…

    Cambium Networks cnPilot
  • Unscored —
    CVE-2017-5257

    In version 3.5 and prior of Cambium Networks ePMP firmware, an attacker who knows (or guesses) the SNMP read/write (RW)…

    Cambium Networks ePMP