Omnia Mpx Node Firmware Security Vulnerabilities and Issues — Omnia Mpx Node Firmware CVE List

Lucene search

TelosallianceOmnia Mpx Node Firmware

4 matches found

CVE•added 2022/09/02 10:15 p.m.•61 views

CVE-2022-36642

A local file disclosure vulnerability in /appConfig/userDB.json of Telos Alliance Omnia MPX Node through 1.0.0-1.4.9 allows attackers to access users credentials which makes him able to gain initial access to the control panel with high privilege because the cleartext storage of sensitive informati...

9.8CVSS8.9AI score0.76028EPSS

CVE•added 2022/11/29 5:15 a.m.•55 views

CVE-2022-43326

An Insecure Direct Object Reference (IDOR) vulnerability in the password reset function of Telos Alliance Omnia MPX Node 1.0.0-1.4.[*] allows attackers to arbitrarily change user and Administrator account passwords.

7.5CVSS7.5AI score0.00102EPSS

CVE•added 2022/12/02 3:15 a.m.•39 views

CVE-2022-45562

Insecure permissions in Telos Alliance Omnia MPX Node v1.0.0 to v1.4.9 allow attackers to manipulate and access system settings with backdoor account low privilege, this can lead to change hardware settings and execute arbitrary commands in vulnerable system functions that is requires high privileg...

8.8CVSS8.8AI score0.0012EPSS

CVE•added 2022/12/02 2:15 a.m.•38 views

CVE-2022-43325

An unauthenticated command injection vulnerability in the product license validation function of Telos Alliance Omnia MPX Node 1.3.* - 1.4.* allows attackers to execute arbitrary commands via a crafted payload injected into the license input.

9.8CVSS9.8AI score0.06658EPSS