Telosalliance

Omnia Mpx Node Firmware

4 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2022-45562

Exploit
  • EPSS 0.25%
  • Veröffentlicht 02.12.2022 03:15:09
  • Zuletzt bearbeitet 24.04.2025 14:15:41

Insecure permissions in Telos Alliance Omnia MPX Node v1.0.0 to v1.4.9 allow attackers to manipulate and access system settings with backdoor account low privilege, this can lead to change hardware settings and execute arbitrary commands in vulnerabl...

9.8

CVE-2022-43325

Exploit
  • EPSS 29.99%
  • Veröffentlicht 02.12.2022 02:15:09
  • Zuletzt bearbeitet 24.04.2025 20:15:25

An unauthenticated command injection vulnerability in the product license validation function of Telos Alliance Omnia MPX Node 1.3.* - 1.4.* allows attackers to execute arbitrary commands via a crafted payload injected into the license input.

7.5

CVE-2022-43326

Exploit
  • EPSS 0.23%
  • Veröffentlicht 29.11.2022 05:15:11
  • Zuletzt bearbeitet 25.04.2025 17:15:17

An Insecure Direct Object Reference (IDOR) vulnerability in the password reset function of Telos Alliance Omnia MPX Node 1.0.0-1.4.[*] allows attackers to arbitrarily change user and Administrator account passwords.

9.8

CVE-2022-36642

Exploit
  • EPSS 70.72%
  • Veröffentlicht 02.09.2022 22:15:08
  • Zuletzt bearbeitet 21.11.2024 07:13:27

A local file disclosure vulnerability in /appConfig/userDB.json of Telos Alliance Omnia MPX Node through 1.0.0-1.4.9 allows attackers to access users credentials which makes him able to gain initial access to the control panel with high privilege bec...