CVE-2022-1357 CRITICAL

CVE-2022-1357: Cambium Networks cnMaestro OS Command Injection

Vendor Cambium Networks
Product cnMaestro
Weakness CWE-78
Published May 17, 2022
Last update April 16, 2025

CVSS base score

9.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

The affected On-Premise cnMaestro allows an unauthenticated attacker to access the cnMaestro server and execute arbitrary code in the privileges of the web server. This lack of validation could allow an attacker to append arbitrary data to the logger command.

Key dates

02Disclosure timeline

May 17, 2022 CVE published
April 16, 2025 Record updated