PT-2022-26850 · Telos Alliance · Telos Alliance Omnia Mpx Node

Published 2022-11-29 · Updated 2025-04-25 · CVE-2022-43326

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Telos Alliance Omnia MPX Node versions 1.0.0 through 1.4.[*]

Description An Insecure Direct Object Reference (IDOR) vulnerability in the password reset function allows attackers to arbitrarily change user and Administrator account passwords.

Recommendations For Telos Alliance Omnia MPX Node versions 1.0.0 through 1.4.[*], as a temporary workaround, consider disabling the password reset function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2022-43326

Affected Products

Telos Alliance Omnia Mpx Node

References · 5

• 🔥 https://cyber-guy.gitbook.io/cyber-guys-blog/pocs/cve-2022-43326 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-43326 · Security Note
• https://osv.dev/vulnerability/CVE-2022-43326 · Vendor Advisory
• https://t.me/cvenotify/119831 · Telegram Post
• https://t.me/cibsecurity/53636 · Telegram Post