CVE-2022-43326

An Insecure Direct Object Reference (IDOR) vulnerability in the password reset function of Telos Alliance Omnia MPX Node 1.0.0-1.4.[*] allows attackers to arbitrarily change user and Administrator account passwords.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.66% chance of exploitation in the next 30 days, 49th percentile

Published

2022-11-29

Updated

2025-04-25

Proof-of-concept exploits (1)

• https://cyber-guy.gitbook.io/cyber-guys-blog/pocs/cve-2022-43326

References

• CVE Record
• NVD entry

Related

• CVE-2022-43325
• CVE-2022-43332
• CVE-2022-43321
• CVE-2022-43333
• CVE-2022-43320
• CVE-2022-43340