Lucene search
+L

103 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 3:45 p.m.8 views

CVE-2020-17383

A directory traversal vulnerability on Telos Z/IP One devices through 4.0.0r grants an unauthenticated individual root level access to the device's file system. This can be used to identify configuration settings, password hashes for built-in accounts, and the cleartext password for remote...

10CVSS7.5AI score0.04252EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/22 10:24 a.m.11 views

CVE-2019-9541

: Information Exposure vulnerability in itemlookup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions prior to 4.1.5.5...

6.1CVSS6.9AI score0.0082EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:18 a.m.12 views

CVE-2019-9542

: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in itemlookup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System...

6.1CVSS6.9AI score0.00841EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:57 a.m.8 views

CVE-2019-9540

: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in prefs.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions...

6.1CVSS6.9AI score0.00841EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:57 a.m.10 views

CVE-2019-9537

: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in uploaditem.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System...

6.1CVSS6.9AI score0.00841EPSS
Exploits0References1
VulnCheck KEV
VulnCheck KEV
added 2023/11/13 12:0 a.m.2 views

VulnCheck KEV: CVE-2022-36642

A local file disclosure vulnerability in /appConfig/userDB.json of Telos Alliance Omnia MPX Node through 1.0.0-1.4.9 allows attackers to access users credentials which makes him able to gain initial access to the control panel with high privilege because the cleartext storage of sensitive...

9.8CVSS7.3AI score0.09572EPSS
Exploits1References1
OSV
OSV
added 2022/12/02 3:15 a.m.5 views

CVE-2022-45562

Insecure permissions in Telos Alliance Omnia MPX Node v1.0.0 to v1.4.9 allow attackers to manipulate and access system settings with backdoor account low privilege, this can lead to change hardware settings and execute arbitrary commands in vulnerable system functions that is requires high...

8.8CVSS6AI score0.01003EPSS
Exploits1References1
NVD
NVD
added 2022/12/02 3:15 a.m.15 views

CVE-2022-45562

Insecure permissions in Telos Alliance Omnia MPX Node v1.0.0 to v1.4.9 allow attackers to manipulate and access system settings with backdoor account low privilege, this can lead to change hardware settings and execute arbitrary commands in vulnerable system functions that is requires high...

8.8CVSS0.01003EPSS
Exploits1References1
Prion
Prion
added 2022/12/02 3:15 a.m.21 views

Design/Logic Flaw

Insecure permissions in Telos Alliance Omnia MPX Node v1.0.0 to v1.4.9 allow attackers to manipulate and access system settings with backdoor account low privilege, this can lead to change hardware settings and execute arbitrary commands in vulnerable system functions that is requires high...

6.5CVSS8.8AI score0.01003EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2022/12/02 2:15 a.m.5 views

CVE-2022-43325

An unauthenticated command injection vulnerability in the product license validation function of Telos Alliance Omnia MPX Node 1.3. - 1.4. allows attackers to execute arbitrary commands via a crafted payload injected into the license input...

9.8CVSS6AI score0.03211EPSS
Exploits1References1
NVD
NVD
added 2022/12/02 2:15 a.m.28 views

CVE-2022-43325

An unauthenticated command injection vulnerability in the product license validation function of Telos Alliance Omnia MPX Node 1.3. - 1.4. allows attackers to execute arbitrary commands via a crafted payload injected into the license input...

9.8CVSS0.03211EPSS
Exploits1References1
Prion
Prion
added 2022/12/02 2:15 a.m.17 views

Command injection

An unauthenticated command injection vulnerability in the product license validation function of Telos Alliance Omnia MPX Node 1.3. - 1.4. allows attackers to execute arbitrary commands via a crafted payload injected into the license input...

7.5CVSS9.8AI score0.03211EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/12/02 12:0 a.m.6 views

CVE-2022-45562

Insecure permissions in Telos Alliance Omnia MPX Node v1.0.0 to v1.4.9 allow attackers to manipulate and access system settings with backdoor account low privilege, this can lead to change hardware settings and execute arbitrary commands in vulnerable system functions that is requires high...

7.7AI score0.01003EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2022/12/02 12:0 a.m.8 views

PT-2022-26849 · Telos Alliance · Telos Alliance Omnia Mpx Node

Name of the Vulnerable Software and Affected Versions: Telos Alliance Omnia MPX Node versions 1.3. through 1.4. Description: An unauthenticated command injection issue in the product license validation function allows attackers to execute arbitrary commands via a crafted payload injected into the...

9.8CVSS9.8AI score0.03211EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2022/12/02 12:0 a.m.6 views

PT-2022-27575 · Telos Alliance · Telos Alliance Omnia Mpx Node

Name of the Vulnerable Software and Affected Versions: Telos Alliance Omnia MPX Node versions 1.0.0 through 1.4.9 Description: The issue allows attackers to manipulate and access system settings using a backdoor account with low privilege. This can lead to changes in hardware settings and the...

8.8CVSS8.6AI score0.01003EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/12/02 12:0 a.m.5 views

Telos Alliance Omnia MPX Node 安全漏洞

The Telos Alliance Omnia MPX Node is a specialized hardware codec from Telos Alliance, USA. Capable of sending or receiving full FM signals at data rates as low as 320 kbps using the Omnia μMPXTM algorithm, it is ideally suited for capacity-limited networks including IP radios. A security...

8.8CVSS8.2AI score0.01003EPSS
Exploits1References2
CVE
CVE
added 2022/12/02 12:0 a.m.51 views

CVE-2022-45562

The CVE-2022-45562 entry affects Telos Alliance Omnia MPX Node versions 1.0.0 through 1.4.9. A vulnerability from insecure permissions allows an attacker with backdoor low privilege to manipulate and access system settings, potentially changing hardware settings and executing arbitrary commands i...

8.8CVSS8.8AI score0.01003EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2022/12/02 12:0 a.m.5 views

Telos Alliance Omnia MPX Node 操作系统命令注入漏洞

The Telos Alliance Omnia MPX Node is a specialized hardware codec from Telos Alliance, USA. Capable of sending or receiving full FM signals at data rates as low as 320 kbps using the Omnia μMPXTM algorithm, it is ideally suited for capacity-limited networks including IP radios. A security...

9.8CVSS8.8AI score0.03211EPSS
Exploits1References2
Cvelist
Cvelist
added 2022/12/02 12:0 a.m.22 views

CVE-2022-45562

Insecure permissions in Telos Alliance Omnia MPX Node v1.0.0 to v1.4.9 allow attackers to manipulate and access system settings with backdoor account low privilege, this can lead to change hardware settings and execute arbitrary commands in vulnerable system functions that is requires high...

9.1AI score0.01003EPSS
Exploits1References1
Cvelist
Cvelist
added 2022/12/02 12:0 a.m.38 views

CVE-2022-43325

An unauthenticated command injection vulnerability in the product license validation function of Telos Alliance Omnia MPX Node 1.3. - 1.4. allows attackers to execute arbitrary commands via a crafted payload injected into the license input...

10AI score0.03211EPSS
Exploits1References1
Rows per page
Query Builder