Vulnerability in Telosalliance Omnia Mpx Node
CVE-2022-45562
Insecure permissions in Telos Alliance Omnia MPX Node v1.0.0 to v1.4.9 allow attackers to manipulate and access system settings with backdoor account low privilege, this can lead to change hardware settings and execute arbitrary commands in vulnerable system functions that is requires high privilege to access.
EPSS: 0.010 (59.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Telosalliance Omnia_mpx_node
- Telosalliance Omnia_mpx_node_firmware
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, Third Party Advisory)
Frequently asked questions
- What is CVE-2022-45562?
- CVE-2022-45562 is a high-severity vulnerability in Telosalliance Omnia Mpx Node, classified under Incorrect Default Permissions. CVSS score: 8.8/10. Published 2022-12-02.
- How severe is CVE-2022-45562?
- High severity. CVSS v3 base score is 8.8 out of 10.