title: Cambium Networks cnMaestro OS Command Injection
description: The affected On-Premise cnMaestro is vulnerable inside a specific route where a user can upload a crafted package to the system. An attacker could abuse this user-controlled data to execute arbitrary commands on the server.
problem types: CWE-78 OS Command Injection
affected:
{
product: cnMaestro
vendor: Cambium Networks
versions:
lessThan: 3.0.3-r32, status: affected, version: unspecified, versionType: custom
lessThan: 2.4.2-r29, status: affected, version: unspecified, versionType: custom
lessThan: 3.0.0-r34, status: affected, version: unspecified, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N
version: 3.1
]
solutions: Cambium Networks recommends affected users apply one of the following upgrade packages:
3.0.3-r32
2.4.2-r29
3.0.0-r34
The security patches are available from Cambium Networks support (login required).
For users of cnMaestro Cloud, these vulnerabilities have been patched by Cambium Networks and no further action is required.