high7.4
CVE-2022-1361
The affected On-Premise cnMaestro is vulnerable to a pre-auth data exfiltration through improper neutralization of special elements used in an SQL command.
Impact
The affected On-Premise cnMaestro is vulnerable to a pre-auth data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate data about other user’s accounts and devices.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cambiumnetworks | Cnmaestro | Versions 2.4.2, 3.0.0, 3.0.3 |