Headline
CVE-2022-43325: CVE-2022-43325
An unauthenticated command injection vulnerability in the product license validation function of Telos Alliance Omnia MPX Node 1.3.* - 1.4.* allows attackers to execute arbitrary commands via a crafted payload injected into the license input.
OS Command Injection - Omnia MPX
CVE ID: CVE-2022-43325
CVE Author: Momen Eldawakhly (Cyber Guy) & Ahmed Alroky (Bad Bot)
Description:
A command injection vulnerability in the product license validation function of Telos Alliance Omnia MPX Node 1.3.* - 1.4.* allows attackers to execute arbitrary commands via a crafted payload injected into the license input.
PoC Image:
Previous
CVE-2022-43326
Next
PyScript File Read
Last modified 20h ago
Related news
An Insecure Direct Object Reference (IDOR) vulnerability in the password reset function of Telos Alliance Omnia MPX Node 1.0.0-1.4.[*] allows attackers to arbitrarily change user and Administrator account passwords.
Russound XSourcePlayer 777D v06.08.03 was discovered to contain a remote code execution vulnerability via the scriptRunner.cgi component.