high7.1
CVE-2022-1356
cnMaestro is vulnerable to a local privilege escalation.
Impact
cnMaestro is vulnerable to a local privilege escalation. By default, a user does not have root privileges. However, a user can run scripts as sudo, which could allow an attacker to gain root privileges when running user scripts outside allowed commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cambiumnetworks | Cnmaestro | Versions 2.4.2, 3.0.0, 3.0.3 |