title: Cambium Networks cnMaestro use of Potentially Dangerous Function
description: cnMaestro is vulnerable to a local privilege escalation. By default, a user does not have root privileges. However, a user can run scripts as sudo, which could allow an attacker to gain root privileges when running user scripts outside allowed commands.
problem types: CWE-78 OS Command Injection
affected:
{
product: cnMaestro
vendor: Cambium Networks
versions:
lessThan: 3.0.3-r32, status: affected, version: unspecified, versionType: custom
lessThan: 2.4.2-r29, status: affected, version: unspecified, versionType: custom
lessThan: 3.0.0-r34, status: affected, version: unspecified, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
version: 3.1
]
solutions: Cambium Networks recommends affected users apply one of the following upgrade packages:
3.0.3-r32
2.4.2-r29
3.0.0-r34
The security patches are available from Cambium Networks support (login required).
For users of cnMaestro Cloud, these vulnerabilities have been patched by Cambium Networks and no further action is required.