CVEvulnerability
CVE-2022-36642
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2022-09-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-862
Description
A local file disclosure vulnerability in /appConfig/userDB.json of Telos Alliance Omnia MPX Node through 1.0.0-1.4.9 allows attackers to access users credentials which makes him able to gain initial access to the control panel with high privilege because the cleartext storage of sensitive information which can be unlatched by exploiting the LFD vulnerability.
Affected configurations
• telosalliance omnia mpx node firmware (>= 1.0.0 < 1.5.0)
• telosalliance omnia mpx node firmware 1.5.0
Related
Weakness · CWE (1)
- CWE-862 Missing Authorization weakness
References
- https://cyber-guy.gitbook.io/cyber-guy/pocs/omnia-node-mpx-auth-bypass-via-lfd Exploit, Third Party Advisory
- https://cyber-guy.gitbook.io/cyber-guys-blog/blogs/bypassing-mpx-node-authentication-firmware-analysis Exploit, Third Party Advisory
- https://drive.google.com/drive/folders/1jm9h8JNmezTt7AbHYRY7gPC4lXGDNklL Exploit, Third Party Advisory
- https://www.exploit-db.com/exploits/50996 Exploit, Third Party Advisory, VDB Entry
- https://www.telosalliance.com/radio-processing/audio-interfaces/omnia-mpx-node Product, Vendor Advisory
- https://cyber-guy.gitbook.io/cyber-guy/pocs/omnia-node-mpx-auth-bypass-via-lfd Exploit, Third Party Advisory
- https://cyber-guy.gitbook.io/cyber-guys-blog/blogs/bypassing-mpx-node-authentication-firmware-analysis Exploit, Third Party Advisory
- https://drive.google.com/drive/folders/1jm9h8JNmezTt7AbHYRY7gPC4lXGDNklL Exploit, Third Party Advisory
- https://www.exploit-db.com/exploits/50996 Exploit, Third Party Advisory, VDB Entry
- https://www.telosalliance.com/radio-processing/audio-interfaces/omnia-mpx-node Product, Vendor Advisory