Telosalliance Omnia Mpx Node Firmware
4 CVEs affecting Telosalliance Omnia Mpx Node Firmware. Latest disclosed: 2022-12-02. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-43325 | Critical | 9.8 | 2022-12-02 | An unauthenticated command injection vulnerability in the product license validation function of Telos Alliance Omnia MPX Node 1.3.* - 1.4.* allows attackers t… |
CVE-2022-36642 | Critical | 9.8 | 2022-09-02 | A local file disclosure vulnerability in /appConfig/userDB.json of Telos Alliance Omnia MPX Node through 1.0.0-1.4.9 allows attackers to access users credentia… |
CVE-2022-45562 | High | 8.8 | 2022-12-02 | Insecure permissions in Telos Alliance Omnia MPX Node v1.0.0 to v1.4.9 allow attackers to manipulate and access system settings with backdoor account low privi… |
CVE-2022-43326 | High | 7.5 | 2022-11-29 | An Insecure Direct Object Reference (IDOR) vulnerability in the password reset function of Telos Alliance Omnia MPX Node 1.0.0-1.4.[*] allows attackers to arbi… |