PT-2023-13452 · Cambium · Cambium Enterprise Wi-Fi System
CVE-2022-35908
·
Publicado
2023-09-29
·
Atualizado
2024-09-23
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Cambium Enterprise Wi-Fi System Software versions prior to 6.4.2
Description
The issue is related to the lack of sanitization of the ping host argument in the device-agent of the Cambium Enterprise Wi-Fi System Software. This can potentially lead to exploitation.
Recommendations
For versions prior to 6.4.2, update to version 6.4.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the device-agent to minimize the risk of exploitation.
Correção
Path traversal
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Cambium Enterprise Wi-Fi System