medium5.0
CVE-2022-1362
The affected On-Premise cnMaestro is vulnerable inside a specific route where a user can upload a crafted package to the system.
Impact
The affected On-Premise cnMaestro is vulnerable inside a specific route where a user can upload a crafted package to the system. An attacker could abuse this user-controlled data to execute arbitrary commands on the server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cambiumnetworks | Cnmaestro | Versions 2.4.2, 3.0.0, 3.0.3 |