title: Cambium Networks cnMaestro OS Command Injection
description: The affected On-Premise cnMaestro allows an unauthenticated attacker to access the cnMaestro server and execute arbitrary code in the privileges of the web server. This lack of validation could allow an attacker to append arbitrary data to the logger command.
problem types: CWE-78 OS Command Injection
affected:
{
product: cnMaestro
vendor: Cambium Networks
versions:
lessThan: 3.0.3-r32, status: affected, version: unspecified, versionType: custom
lessThan: 2.4.2-r29, status: affected, version: unspecified, versionType: custom
lessThan: 3.0.0-r34, status: affected, version: unspecified, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]
solutions: Cambium Networks recommends affected users apply one of the following upgrade packages:
3.0.3-r32
2.4.2-r29
3.0.0-r34
The security patches are available from Cambium Networks support (login required).
For users of cnMaestro Cloud, these vulnerabilities have been patched by Cambium Networks and no further action is required.