Critical severity9.8NVD Advisory· Published Dec 2, 2022· Updated Jun 17, 2026

CVE-2022-43325

Description

An unauthenticated command injection vulnerability in the product license validation function of Telos Alliance Omnia MPX Node 1.3.* - 1.4.* allows attackers to execute arbitrary commands via a crafted payload injected into the license input.

Affected products

Telos Alliance/Omnia MPX Nodedescription
Telos Alliance/Omnia MPX Nodellm-fuzzy
Range: 1.3.* - 1.4.*

Patches

Vulnerability mechanics

References

cyber-guy.gitbook.io/cyber-guys-blog/pocs/cve-2022-43325nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000