CVE-2022-45562

8.8 highEPSS 1.1%

High (8.8) in telosalliance omnia mpx node firmware. EPSS 1.1% chance of exploitation in the next 30 days.

Insecure permissions in Telos Alliance Omnia MPX Node v1.0.0 to v1.4.9 allow attackers to manipulate and access system settings with backdoor account low privilege, this can lead to change hardware settings and execute arbitrary commands in vulnerable system functions that is requires high privilege to access.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-276
Published: 2022-12-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

telosalliance:omnia_mpx_node_firmware

References

https://cyber-guy.gitbook.io/cyber-guys-blog/pocs/cve-2022-45562
https://cyber-guy.gitbook.io/cyber-guys-blog/pocs/cve-2022-45562

Check your stack JSON