.. / CVE-2022-36642

• LFI
• Nuclei
• Web

Exploit for Omnia MPX 1.5.0+r1 - Local File Inclusion (CVE-2022-36642)

Description:

Telos Alliance Omnia MPX Node through 1.5.0+r1 is vulnerable to local file inclusion via logs/downloadMainLog. By retrieving userDB.json allows an attacker to retrieve cleartext credentials and escalate privileges via the control panel.

Nuclei Template

View the template here CVE-2022-36642.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-36642.yaml

References: