CVE-2022-1358: Cambiumnetworks Cnmaestro

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

The affected On-Premise is vulnerable to data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate and dump all data held in the cnMaestro database.

Affected products

• Cambiumnetworks Cnmaestro: version 2.4.2 only; version 3.0.0 only; version 3.0.3 only

Published 2022-05-17. Last modified 2026-06-17.