Lucene search
IcscertCVELIST:CVE-2022-1358HistoryMay 17, 2022 - 8:12 p.m.
CVE-2022-1358 Cambium Networks cnMaestro SQL Injection
2022-05-1720:12:45
CWE-89
icscert
www.cve.org
3
sql injection
on-premise
cambium networks
cnmaestro
data exfiltration
security vulnerability
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
EPSS
0.001
Percentile
50.5%
The affected On-Premise is vulnerable to data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate and dump all data held in the cnMaestro database.
CNA Affected
[
{
"product": "cnMaestro",
"vendor": "Cambium Networks",
"versions": [
{
"lessThan": "3.0.3-r32",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "2.4.2-r29",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "3.0.0-r34",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
cnvd
cnvd
Cambium Networks cnMaestro SQL Injection Vulnerability
2022-05-13 00:00:00
nvd
nvd
CVE-2022-1358
2022-05-17 21:15:07
prion
prion
Sql injection
2022-05-17 21:15:00
cve
cve
CVE-2022-1358
2022-05-17 21:15:07
ics
ics
Cambium Networks cnMaestro
2022-05-12 12:00:00
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
EPSS
0.001
Percentile
50.5%
Related for CVELIST:CVE-2022-1358