CVE-2022-43325: Telosalliance Omnia Mpx Node Firmware

Critical severity, CVSS 9.8. EPSS: 6% chance of exploitation in the next 30 days.

An unauthenticated command injection vulnerability in the product license validation function of Telos Alliance Omnia MPX Node 1.3.* - 1.4.* allows attackers to execute arbitrary commands via a crafted payload injected into the license input.

Affected products

• Telosalliance Omnia Mpx Node Firmware: version 1.3.37 only; version 1.3.35 only

Published 2022-12-02. Last modified 2026-06-17.