CVE-2022-1359 — Cambium Networks cnMaestro Path Traversal
The affected On-Premise cnMaestro is vulnerable to an arbitrary file-write through improper limitation of a pathname to a restricted directory inside a specific route. If an att…
Published: 2022-05-17 · CVSS: 5.7 · CVSS 3.1
The affected On-Premise cnMaestro is vulnerable to an arbitrary file-write through improper limitation of a pathname to a restricted directory inside a specific route. If an attacker supplied path traversal charters (../) as part of a filename, the server will save the file where the attacker chooses. This could allow an attacker to write any data to any file in the server.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7