What’s Vulnerable › Vulnerabilities

CVE-2022-1358: Cambium Networks cnMaestro SQL Injection

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-05-17 · updated 2026-06-17
• Weakness: CWE-89

Description

The affected On-Premise is vulnerable to data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate and dump all data held in the cnMaestro database.

Affected products

• Cambium Networks cnMaestro: 2.4.2, 3.0.0, 3.0.3

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-04
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-04

Get alerted when CVE-2022-1358 or the next vulnerability affects your stack