← Database

CVE-2022-43325

CRITICAL CVSS: 9.8 Published: 2022-12-02 Modified: 2026-06-17

Description

An unauthenticated command injection vulnerability in the product license validation function of Telos Alliance Omnia MPX Node 1.3.* - 1.4.* allows attackers to execute arbitrary commands via a crafted payload injected into the license input.

Affected Platforms

Telosalliance Omnia Mpx NodeTelosalliance Omnia Mpx Node Firmware

Weakness Type

CWE-78, CWE-78

References