VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Dec 2, 2022· Updated Jun 17, 2026

CVE-2022-43325

CVE-2022-43325

Description

An unauthenticated command injection vulnerability in the product license validation function of Telos Alliance Omnia MPX Node 1.3.* - 1.4.* allows attackers to execute arbitrary commands via a crafted payload injected into the license input.

Affected products

4
  • Telos Alliance/Omnia MPX Nodecpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: 1.3.* - 1.4.*
  • Telosalliance/Omnia Mpx Node Firmware2 versions
    cpe:2.3:o:telosalliance:omnia_mpx_node_firmware:1.3.37:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:telosalliance:omnia_mpx_node_firmware:1.3.37:*:*:*:*:*:*:*
    • cpe:2.3:o:telosalliance:omnia_mpx_node_firmware:1.3.35:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.