CVE-2022-1356 — Cambium Networks cnMaestro use of Potentially Dangerous Function

CVE-2022-1356

Cambium Networks cnMaestro use of Potentially Dangerous Function PUBLISHED

Description (CNA)

cnMaestro is vulnerable to a local privilege escalation. By default, a user does not have root privileges. However, a user can run scripts as sudo, which could allow an attacker to gain root privileges when running user scripts outside allowed commands.

Affected (CNA)

Vendor / product	Versions
Cambium Networks / cnMaestro	affected unspecified before 3.0.3-r32; affected unspecified before 2.4.2-r29; affected unspecified before 3.0.0-r34

CWE

CWE-78

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-04

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-04

CISA-ADP

No English description supplied.

No references supplied.