critical9.8
CVE-2022-43325
An unauthenticated command injection vulnerability in the product license validation function of Telos Alliance Omnia MPX Node 1.3.* - 1.4.* allows attackers t…
Impact
An unauthenticated command injection vulnerability in the product license validation function of Telos Alliance Omnia MPX Node 1.3.* - 1.4.* allows attackers to execute arbitrary commands via a crafted payload injected into the license input.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Telosalliance | Omnia Mpx Node Firmware | Versions 1.3.37, 1.3.35 |