Description (CNA)
The affected On-Premise cnMaestro is vulnerable to a pre-auth data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate data about other user’s accounts and devices.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Cambium Networks / cnMaestro | affected unspecified before 3.0.3-r32; affected unspecified before 2.4.2-r29; affected unspecified before 3.0.0-r34 |
CWE
CWE-89
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.