CVE-2022-1358

—

CVSS 3.1

7.5 high

EPSS

<1%p56

Published

May 17, 2022 (May 17, 2022)

Modified

Jun 17, 2026

Description

The affected On-Premise is vulnerable to data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate and dump all data held in the cnMaestro database.

Vendors: cambiumnetworks
Products: cnmaestro
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.