Known Vulnerabilities for products from Cambiumnetworks

Listed below are 20 of the newest known vulnerabilities associated with the vendor "Cambiumnetworks".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Additional devices specifications by Cambiumnetworks can be found at device.report : Cambiumnetworks

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2022-35908 json Cambium Enterprise Wi-Fi System Software before 6.4.2 does not sanitize the ping host argument in device-agent. 8.8 - HIGH 2023-09-29 2023-10-10
CVE-2022-1362 json The affected On-Premise cnMaestro is vulnerable inside a specific route where a user can upload a crafted package to the syst... 7.3 - HIGH 2022-05-17 2022-06-06
CVE-2022-1361 json The affected On-Premise cnMaestro is vulnerable to a pre-auth data exfiltration through improper neutralization of special el... 7.5 - HIGH 2022-05-17 2022-06-07
CVE-2022-1360 json The affected On-Premise cnMaestro is vulnerable to execution of code on the cnMaestro hosting server. This could allow a remo... 9.8 - CRITICAL 2022-05-17 2022-06-06
CVE-2022-1359 json The affected On-Premise cnMaestro is vulnerable to an arbitrary file-write through improper limitation of a pathname to a res... 7.5 - HIGH 2022-05-17 2022-06-06
CVE-2022-1358 json The affected On-Premise is vulnerable to data exfiltration through improper neutralization of special elements used in an SQL... 7.5 - HIGH 2022-05-17 2022-06-06
CVE-2022-1357 json The affected On-Premise cnMaestro allows an unauthenticated attacker to access the cnMaestro server and execute arbitrary cod... 9.8 - CRITICAL 2022-05-17 2022-06-06
CVE-2022-1356 json cnMaestro is vulnerable to a local privilege escalation. By default, a user does not have root privileges. However, a user ca... 7.8 - HIGH 2022-05-17 2022-06-06
CVE-2020-9022 json An issue was discovered on Xirrus XR520, XR620, XR2436, and XH2-120 devices. The cgi-bin/ViewPage.cgi user parameter allows X... 6.1 - MEDIUM 2020-02-17 2020-02-19
CVE-2017-5859 json On Cambium Networks cnPilot R200/201 devices before 4.3, there is a vulnerability involving the certificate of the device and... Not Provided 2017-03-10 2025-04-20
CVE-2017-5263 json Versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware lack CSRF controls that can mitigate the effects of CSRF att... 8 - HIGH 2017-12-20 2019-10-09
CVE-2017-5262 json In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the SNMP read-only (RO) community string has access to s... 8 - HIGH 2017-12-20 2019-10-09
CVE-2017-5261 json In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web adminis... 8.8 - HIGH 2017-12-20 2019-10-09
CVE-2017-5260 json In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, although the option to access the configuration file is ... 8.8 - HIGH 2017-12-20 2019-10-09
CVE-2017-5259 json In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, an undocumented, root-privilege administration web shell... 8.8 - HIGH 2017-12-20 2019-10-09
CVE-2017-5258 json In version 3.5 and prior of Cambium Networks ePMP firmware, an attacker who knows or can guess the RW community string can pr... 5.4 - MEDIUM 2017-12-20 2019-10-09
CVE-2017-5257 json In version 3.5 and prior of Cambium Networks ePMP firmware, an attacker who knows (or guesses) the SNMP read/write (RW) commu... 5.4 - MEDIUM 2017-12-20 2019-10-09
CVE-2017-5256 json In version 3.5 and prior of Cambium Networks ePMP firmware, all authenticated users have the ability to update the Device Nam... 5.4 - MEDIUM 2017-12-20 2019-10-09
CVE-2017-5255 json In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web mana... 8.8 - HIGH 2017-12-20 2019-10-09
CVE-2017-5254 json In version 3.5 and prior of Cambium Networks ePMP firmware, the non-administrative users 'installer' and 'home' have the capa... 8.8 - HIGH 2017-12-20 2019-10-09
Results limited to 20 most recent vulnerabilities

Known software with vulnerabilities from Cambiumnetworks

Type Vendor Product Version
HardwareCambiumnetworksXh2-120-
Operating
System		CambiumnetworksXh2-120 Firmware-
HardwareCambiumnetworksXr2436-
Operating
System		CambiumnetworksXr2436 Firmware-
HardwareCambiumnetworksXr520-
Operating
System		CambiumnetworksXr520 Firmware-
HardwareCambiumnetworksXr620-
Operating
System		CambiumnetworksXr620 Firmware-

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report