CVE-2022-43326

PoC —

CVSS 3.1

7.5 high

EPSS

<1%p50

Published

Nov 29, 2022 (Nov 29, 2022)

Modified

Jun 17, 2026

Description

An Insecure Direct Object Reference (IDOR) vulnerability in the password reset function of Telos Alliance Omnia MPX Node 1.0.0-1.4.[*] allows attackers to arbitrarily change user and Administrator account passwords.

Vendors: telosalliance
Products: omnia mpx node firmware
Weakness: CWE-639
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.