Cambium Networks vulnerabilities
17 published CVEs name Cambium Networks among the affected products.
- Published CVEs
- 17
- Last 12 months
- 0
- Critical
- 1
- Known exploited
- 0
Critical 1High 10Medium 6Low 0Not scored 0
CVEs per yearBy the year they were published
- 201710
- 20227
Newest CVEs
- CVE-2022-1362
Cambium Networks cnMaestro OS Command Injection
Cambium Networks · cnMaestro
Medium5.0 - CVE-2022-1361
Cambium Networks cnMaestro SQL Injection
Cambium Networks · cnMaestro
High7.4 - CVE-2022-1360
Cambium Networks cnMaestro OS Command Injection
Cambium Networks · cnMaestro
High8.2 - CVE-2022-1359
Cambium Networks cnMaestro Path Traversal
Cambium Networks · cnMaestro
Medium5.7 - CVE-2022-1358
Cambium Networks cnMaestro SQL Injection
Cambium Networks · cnMaestro
Medium5.9 - CVE-2022-1356
Cambium Networks cnMaestro use of Potentially Dangerous Function
Cambium Networks · cnMaestro
High7.1 - CVE-2022-1357
Cambium Networks cnMaestro OS Command Injection
Cambium Networks · cnMaestro
Critical9.8 - CVE-2017-5263
Versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware lack CSRF controls that can mitigate the effects of CSRF attacks, which are most typically…
Cambium Networks · cnPilot
High8.0 - CVE-2017-5262
In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the SNMP read-only (RO) community string has access to sensitive information by OID…
Cambium Networks · cnPilot
High8.0 - CVE-2017-5261
In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web administrative console expose a file path…
Cambium Networks · cnPilot
High8.8
Products with the most CVEs
Most common weaknesses
- CWE-78 OS command injection6
- CWE-79 Cross-site scripting (XSS)3
- CWE-22 Path traversal2
- CWE-472 2
- CWE-89 SQL injection2
- CWE-200 Exposure of sensitive information1
- CWE-269 Improper privilege management1
- CWE-284 Improper access control1
- CWE-319 Cleartext transmission of sensitive information1
- CWE-352 Cross-site request forgery (CSRF)1