Read the docs

Telosalliance

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Telosalliance records in CISA KEV

No Telosalliance vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

4 records in Omnia Mpx Node Firmware · all components

Priority MEDIUM 57

A local file disclosure vulnerability in /appConfig/userDB.json of Telos Alliance Omnia MPX Node through 1.0.0-1.4.9 allows attackers to access users credentials which makes him able to gain initial access to the control…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.13148 Published 2022-09-02 No fix listed CWE-862
Priority MEDIUM 52

An unauthenticated command injection vulnerability in the product license validation function of Telos Alliance Omnia MPX Node 1.3.* - 1.4.* allows attackers to execute arbitrary commands via a crafted payload injected i…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06175 Published 2022-12-02 No fix listed CWE-78
Priority MEDIUM 42

Insecure permissions in Telos Alliance Omnia MPX Node v1.0.0 to v1.4.9 allow attackers to manipulate and access system settings with backdoor account low privilege, this can lead to change hardware settings and execute a…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01072 Published 2022-12-02 No fix listed CWE-276
Open these records in search →