Cambium Networks cnMaestro Path Traversal

The affected On-Premise cnMaestro is vulnerable to an arbitrary file-write through improper limitation of a pathname to a restricted directory inside a specific route. If an attacker supplied path traversal charters (../) as part of a filename, the server will save the file where the attacker chooses. This could allow an attacker to write any data to any file in the server.

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

OS命令中使用的特殊元素转义处理不恰当(OS命令注入)

Cambium Networks cnMaestro 路径遍历漏洞

Cambium Networks cnMaestro是Cambium Networks的一个基于云的或本地软件平台，用于安全的端到端网络控制。 Cambium Networks cnMaestro存在路径遍历漏洞，该漏洞源于 cnMaestro 容易受到任意文件写入的攻击。攻击者利用该漏洞可将任何数据写入服务器中的任何文件。

N/A

N/A