CVE-2022-36642
critical · 9.8A public exploit / detection template exists
Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →
A local file disclosure vulnerability in /appConfig/userDB.json of Telos Alliance Omnia MPX Node through 1.0.0-1.4.9 allows attackers to access users credentials which makes him able to gain initial access to the control panel with high privilege because the cleartext storage of sensitive information which can be unlatched by exploiting the LFD vulnerability.
9.8
CVSS
12.9%
EPSS (exploit prob.)
96th
EPSS percentile
2022-09-02
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-862
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| telosalliance | omnia_mpx_node_firmware | >= 1.0.0, < 1.5.0 |
| telosalliance | omnia_mpx_node_firmware | 1.5.0 |
| telosalliance | omnia_mpx_node_firmware | 1.5.0 |
| telosalliance | omnia_mpx_node | all versions |
Check a specific version with /api/v1/cve/match.
References
- https://cyber-guy.gitbook.io/cyber-guy/pocs/omnia-node-mpx-auth-bypass-via-lfd
- https://cyber-guy.gitbook.io/cyber-guys-blog/blogs/bypassing-mpx-node-authentication-firmware-analysis
- https://drive.google.com/drive/folders/1jm9h8JNmezTt7AbHYRY7gPC4lXGDNklL
- https://www.exploit-db.com/exploits/50996
- https://www.telosalliance.com/radio-processing/audio-interfaces/omnia-mpx-node
- https://cyber-guy.gitbook.io/cyber-guy/pocs/omnia-node-mpx-auth-bypass-via-lfd
- https://cyber-guy.gitbook.io/cyber-guys-blog/blogs/bypassing-mpx-node-authentication-firmware-analysis
- https://drive.google.com/drive/folders/1jm9h8JNmezTt7AbHYRY7gPC4lXGDNklL
- https://www.exploit-db.com/exploits/50996
- https://www.telosalliance.com/radio-processing/audio-interfaces/omnia-mpx-node
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2022-36642