CVEvulnerability

CVE-2022-45562

8.8 HIGH Published 2022-12-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-12-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-276

Description

Insecure permissions in Telos Alliance Omnia MPX Node v1.0.0 to v1.4.9 allow attackers to manipulate and access system settings with backdoor account low privilege, this can lead to change hardware settings and execute arbitrary commands in vulnerable system functions that is requires high privilege to access.

Affected configurations

• telosalliance omnia mpx node firmware (>= 1.0.0 <= 1.4.9)

Related

Weakness · CWE (1)

  • CWE-276 Incorrect Default Permissions weakness

References