CVE-2022-1359: Cambiumnetworks Cnmaestro

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

The affected On-Premise cnMaestro is vulnerable to an arbitrary file-write through improper limitation of a pathname to a restricted directory inside a specific route. If an attacker supplied path traversal charters (../) as part of a filename, the server will save the file where the attacker chooses. This could allow an attacker to write any data to any file in the server.

Affected products

• Cambiumnetworks Cnmaestro: version 2.4.2 only; version 3.0.0 only; version 3.0.3 only

Published 2022-05-17. Last modified 2026-06-17.