PatchTheCVE: cambiumnetworks

CVE-2023-6691: Cambium ePMP Force 300-25 version 4.7.0.1 is vulnerable to a code injection vulnerability that could allow an

Wed, 17 Jun 2026 06:51:14 +0000

HIGH 7.8: Cambium ePMP Force 300-25 version 4.7.0.1 is vulnerable to a code injection vulnerability that could allow an attacker to perform remote code execution and gain root privileges.

CVE-2022-35908: Cambium Enterprise Wi-Fi System Software before 6.4.2 does not sanitize the ping host argument in device-agent

Wed, 17 Jun 2026 04:52:29 +0000

HIGH 8.8: Cambium Enterprise Wi-Fi System Software before 6.4.2 does not sanitize the ping host argument in device-agent.

CVE-2022-1362: The affected On-Premise cnMaestro is vulnerable inside a specific route where a user can upload a crafted pack

Wed, 17 Jun 2026 04:22:17 +0000

MEDIUM 5.0: The affected On-Premise cnMaestro is vulnerable inside a specific route where a user can upload a crafted package to the system. An attacker could abuse this user-controlled data to execute arbitrary commands on the server.

CVE-2022-1361: The affected On-Premise cnMaestro is vulnerable to a pre-auth data exfiltration through improper neutralizatio

Wed, 17 Jun 2026 04:22:17 +0000

HIGH 7.4: The affected On-Premise cnMaestro is vulnerable to a pre-auth data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate data about other user’s accounts and devices.

CVE-2022-1360: The affected On-Premise cnMaestro is vulnerable to execution of code on the cnMaestro hosting server

Wed, 17 Jun 2026 04:22:17 +0000

HIGH 8.2: The affected On-Premise cnMaestro is vulnerable to execution of code on the cnMaestro hosting server. This could allow a remote attacker to change server configuration settings.

CVE-2022-1359: The affected On-Premise cnMaestro is vulnerable to an arbitrary file-write through improper limitation of a pa

Wed, 17 Jun 2026 04:22:17 +0000

MEDIUM 5.7: The affected On-Premise cnMaestro is vulnerable to an arbitrary file-write through improper limitation of a pathname to a restricted directory inside a specific route. If an attacker supplied path traversal charters (../) as part of a filename, the server will save the file where the attacker choose

CVE-2022-1358: The affected On-Premise is vulnerable to data exfiltration through improper neutralization of special elements

Wed, 17 Jun 2026 04:22:17 +0000

MEDIUM 5.9: The affected On-Premise is vulnerable to data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate and dump all data held in the cnMaestro database.

CVE-2022-1357: The affected On-Premise cnMaestro allows an unauthenticated attacker to access the cnMaestro server and execut

Wed, 17 Jun 2026 04:22:16 +0000

CRITICAL 9.8: The affected On-Premise cnMaestro allows an unauthenticated attacker to access the cnMaestro server and execute arbitrary code in the privileges of the web server. This lack of validation could allow an attacker to append arbitrary data to the logger command.

CVE-2022-1356: cnMaestro is vulnerable to a local privilege escalation

Wed, 17 Jun 2026 04:22:16 +0000

HIGH 7.1: cnMaestro is vulnerable to a local privilege escalation. By default, a user does not have root privileges. However, a user can run scripts as sudo, which could allow an attacker to gain root privileges when running user scripts outside allowed commands.

CVE-2020-9022: An issue was discovered on Xirrus XR520, XR620, XR2436, and XH2-120 devices

Wed, 17 Jun 2026 03:27:21 +0000

MEDIUM 6.1: An issue was discovered on Xirrus XR520, XR620, XR2436, and XH2-120 devices. The cgi-bin/ViewPage.cgi user parameter allows XSS.

CVE-2017-5263: Versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware lack CSRF controls that can mitigate the effe

Wed, 17 Jun 2026 01:20:16 +0000

HIGH 8.0: Versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware lack CSRF controls that can mitigate the effects of CSRF attacks, which are most typically implemented as randomized per-session tokens associated with any web application function, especially destructive ones.

CVE-2017-5262: In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the SNMP read-only (RO) community string