CVE-2022-1358 — Cambium Networks cnMaestro SQL Injection

CVE-2022-1358

Cambium Networks cnMaestro SQL Injection PUBLISHED

Description (CNA)

The affected On-Premise is vulnerable to data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate and dump all data held in the cnMaestro database.

Affected (CNA)

Vendor / product	Versions
Cambium Networks / cnMaestro	affected unspecified before 3.0.3-r32; affected unspecified before 2.4.2-r29; affected unspecified before 3.0.0-r34

CWE

CWE-89

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-04

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-04

CISA-ADP

No English description supplied.

No references supplied.