CVE-2022-1357

The affected On-Premise cnMaestro allows an unauthenticated attacker to access the cnMaestro server and execute arbitrary code in the privileges of the web server. This lack of validation could allow an attacker to append arbitrary data to the logger command.

CVSS v3 9.8 CRITICAL
CVSS v2.0 7.5 HIGH

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-04	Third Party Advisory US Government Resource

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:cambiumnetworks:cnmaestro:2.4.2::::on_premises:::
	cpe:2.3:o:cambiumnetworks:cnmaestro:3.0.0::::on_premises:::
	cpe:2.3:o:cambiumnetworks:cnmaestro:3.0.3::::on_premises:::

History

06 Jun 2022, 17:57

Type	Values Removed	Values Added
CPE		cpe:2.3:o:cambiumnetworks:cnmaestro:3.0.0::::on_premises::: cpe:2.3:o:cambiumnetworks:cnmaestro:2.4.2::::on_premises::: cpe:2.3:o:cambiumnetworks:cnmaestro:3.0.3::::on_premises:::
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : 7.5 v3 : 9.8
References	~~(CONFIRM) https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-04 -~~	(CONFIRM) https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-04 - Third Party Advisory, US Government Resource

17 May 2022, 21:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2022-05-17 21:15

Updated : 2024-02-04 22:29

NVD link : CVE-2022-1357

Mitre link : CVE-2022-1357

CVE.ORG link : CVE-2022-1357

JSON object : View

Products Affected

cambiumnetworks

cnmaestro

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

{"id": "CVE-2022-1357", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "ics-cert@hq.dhs.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2022-05-17T21:15:07.920", "references": [{"url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-04", "tags": ["Third Party Advisory", "US Government Resource"], "source": "ics-cert@hq.dhs.gov"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "ics-cert@hq.dhs.gov", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "The affected On-Premise cnMaestro allows an unauthenticated attacker to access the cnMaestro server and execute arbitrary code in the privileges of the web server. This lack of validation could allow an attacker to append arbitrary data to the logger command."}, {"lang": "es", "value": "El cnMaestro On-Premise afectado permite a un atacante no autenticado acceder al servidor de cnMaestro y ejecutar c\u00f3digo arbitrario con los privilegios del servidor web. Esta falta de comprobaci\u00f3n podr\u00eda permitir a un atacante a\u00f1adir datos arbitrarios al comando del registrador"}], "lastModified": "2022-06-06T17:57:46.113", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cambiumnetworks:cnmaestro:2.4.2:*:*:*:on_premises:*:*:*", "vulnerable": true, "matchCriteriaId": "93FCE8FD-61FF-4160-9581-C8DD573F5BE0"}, {"criteria": "cpe:2.3:o:cambiumnetworks:cnmaestro:3.0.0:*:*:*:on_premises:*:*:*", "vulnerable": true, "matchCriteriaId": "8E2A97A9-FD28-4592-AB4A-E02E007B6CE3"}, {"criteria": "cpe:2.3:o:cambiumnetworks:cnmaestro:3.0.3:*:*:*:on_premises:*:*:*", "vulnerable": true, "matchCriteriaId": "105A9A7C-BC84-4332-B3A1-525947CFF0D2"}], "operator": "OR"}]}], "sourceIdentifier": "ics-cert@hq.dhs.gov"}