Description
The affected On-Premise cnMaestro is vulnerable to a pre-auth data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate data about other user’s accounts and devices.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cambium Networks | cnMaestro | unspecified – < 3.0.3-r32, unspecified – < 2.4.2-r29, unspecified – < 3.0.0-r34 | 3.0.3-r32 |
Advisories 1
- ICSA-22-132-04 Cambium Networks cnMaestro CISA ICS & IT advisories · May 12, 2022