An Insecure Direct Object Reference (IDOR) vulnerability in the password reset function of Telos Alliance Omnia MPX Node 1.0.0-1.4.[*] allows attackers to arbitrarily change user and Administrator account passwords.
Affected Platforms
Telosalliance Omnia Mpx NodeTelosalliance Omnia Mpx Node Firmware