CVE-2022-43325

CVSS V2 None CVSS V3 None
Description
An unauthenticated command injection vulnerability in the product license validation function of Telos Alliance Omnia MPX Node 1.3.* - 1.4.* allows attackers to execute arbitrary commands via a crafted payload injected into the license input.
Overview
  • CVE ID
  • CVE-2022-43325
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-12-02T02:15:09
  • Last Modified Date
  • 2022-12-05T19:59:08
Weakness Enumerations
CWE URL
CWE-78 http://cwe.mitre.org/data/definitions/78.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:o:telosalliance:omnia_mpx_node_firmware:1.3.37:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:telosalliance:omnia_mpx_node:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:telosalliance:omnia_mpx_node_firmware:1.3.35:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:telosalliance:omnia_mpx_node:-:*:*:*:*:*:*:* 0 OR
References
Reference URL Reference Tags
https://cyber-guy.gitbook.io/cyber-guys-blog/pocs/cve-2022-43325 Exploit Third Party Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-43325
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43325
History
Created Old Value New Value Data Type Notes
2022-12-07 18:05:55 Added to TrackCVE
2022-12-18 04:33:59 2022-12-02T02:15:09.137 2022-12-02T02:15:09 CVE Published Date updated
2022-12-18 04:33:59 2022-12-05T19:59:08 CVE Modified Date updated