Description
cnMaestro is vulnerable to a local privilege escalation. By default, a user does not have root privileges. However, a user can run scripts as sudo, which could allow an attacker to gain root privileges when running user scripts outside allowed commands.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cambium Networks | cnMaestro | unspecified – < 3.0.3-r32, unspecified – < 2.4.2-r29, unspecified – < 3.0.0-r34 | 3.0.3-r32 |
Advisories 1
- ICSA-22-132-04 Cambium Networks cnMaestro CISA ICS & IT advisories · May 12, 2022