CVE-2022-1356: Cambiumnetworks Cnmaestro

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

cnMaestro is vulnerable to a local privilege escalation. By default, a user does not have root privileges. However, a user can run scripts as sudo, which could allow an attacker to gain root privileges when running user scripts outside allowed commands.

Affected products

• Cambiumnetworks Cnmaestro: version 2.4.2 only; version 3.0.0 only; version 3.0.3 only

Published 2022-05-17. Last modified 2026-06-17.