Telosalliance Omnia Mpx Node Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Telosalliance Omnia Mpx Node Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2022-36642 — CVSS 9.8 (critical): A local file disclosure vulnerability in /appConfig/userDB.json of Telos Alliance Omnia MPX Node through 1.0.0-1.4.9 allows attackers to…
• CVE-2022-43325 — CVSS 9.8 (critical): An unauthenticated command injection vulnerability in the product license validation function of Telos Alliance Omnia MPX Node 1.3.* -…
• CVE-2022-45562 — CVSS 8.8 (high): Insecure permissions in Telos Alliance Omnia MPX Node v1.0.0 to v1.4.9 allow attackers to manipulate and access system settings with…
• CVE-2022-43326 — CVSS 7.5 (high): An Insecure Direct Object Reference (IDOR) vulnerability in the password reset function of Telos Alliance Omnia MPX Node 1.0.0-1.4.[*]…