Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2022-1356

Cambium Networks cnMaestro use of Potentially Dangerous Function

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

cnMaestro is vulnerable to a local privilege escalation. By default, a user does not have root privileges. However, a user can run scripts as sudo, which could allow an attacker to gain root privileges when running user scripts outside allowed commands.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cambium Networks cnMaestro

  • unspecified to < 3.0.3-r32affected
  • unspecified to < 2.4.2-r29affected
  • unspecified to < 3.0.0-r34affected

References