CVE-2022-1362 — Cambium Networks cnMaestro OS Command Injection

CVE-2022-1362

Cambium Networks cnMaestro OS Command Injection PUBLISHED

Description (CNA)

The affected On-Premise cnMaestro is vulnerable inside a specific route where a user can upload a crafted package to the system. An attacker could abuse this user-controlled data to execute arbitrary commands on the server.

Affected (CNA)

Vendor / product	Versions
Cambium Networks / cnMaestro	affected unspecified before 3.0.3-r32; affected unspecified before 2.4.2-r29; affected unspecified before 3.0.0-r34

CWE

CWE-78

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-04

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-04

CISA-ADP

No English description supplied.

No references supplied.