Description
The affected On-Premise cnMaestro is vulnerable inside a specific route where a user can upload a crafted package to the system. An attacker could abuse this user-controlled data to execute arbitrary commands on the server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cambium Networks | cnMaestro | unspecified – < 3.0.3-r32, unspecified – < 2.4.2-r29, unspecified – < 3.0.0-r34 | 3.0.3-r32 |
Advisories 1
- ICSA-22-132-04 Cambium Networks cnMaestro CISA ICS & IT advisories · May 12, 2022