Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Telosalliance Component: Omnia Mpx Node Firmware Clear all filters
TI-2022-22496 CVE-2022-45562 · GHSA-5v2x-f677-rw5j

Insecure permissions in Telos Alliance Omnia MPX Node v1.0.0 to v1.4.9 allow attackers to…

Priority MEDIUM 42

Insecure permissions in Telos Alliance Omnia MPX Node v1.0.0 to v1.4.9 allow attackers to manipulate and access system settings with backdoor account low privilege, this can lead to change hardware settings and execute a…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01072 Published 2022-12-02 No fix listed CWE-276
TI-2022-21151 CVE-2022-43325 · GHSA-6vq6-9pm8-vpxf

An unauthenticated command injection vulnerability in the product license validation…

Priority MEDIUM 52

An unauthenticated command injection vulnerability in the product license validation function of Telos Alliance Omnia MPX Node 1.3.* - 1.4.* allows attackers to execute arbitrary commands via a crafted payload injected i…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06175 Published 2022-12-02 No fix listed CWE-78
TI-2022-16929 CVE-2022-36642 · GHSA-33v4-rh3c-mhcg

A local file disclosure vulnerability in /appConfig/userDB.json of Telos Alliance Omnia…

Priority MEDIUM 57

A local file disclosure vulnerability in /appConfig/userDB.json of Telos Alliance Omnia MPX Node through 1.0.0-1.4.9 allows attackers to access users credentials which makes him able to gain initial access to the control…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.13148 Published 2022-09-02 No fix listed CWE-862