CVE-2022-30603

🗓️ 25 Oct 2022 16:33:39Reported by talosType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 105 Views🌐 WEB

OS command injection in Abode iota All-In-One Security Kit 6.9X and 6.9Z

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2022-30603	25 Oct 202220:27	–	circl
CNNVD	Abode Iota operating system command injection vulnerability	20 Oct 202200:00	–	cnnvd
Cvelist	CVE-2022-30603	25 Oct 202216:33	–	cvelist
EUVD	EUVD-2022-52439	3 Oct 202520:07	–	euvd
NVD	CVE-2022-30603	25 Oct 202217:15	–	nvd
osv_cve	CVE-2022-30603	25 Oct 202217:15	–	osv_cve
Prion	Command injection	25 Oct 202217:15	–	prion
Positive Technologies	PT-2022-20198 · Abode Systems · Iota All-In-One Security Kit	25 Oct 202200:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2022-30603: Improper Neutralization of Special Elements used in an OS Command	25 Oct 202200:00	–	rapid7
Talos	Abode Systems, Inc. iota All-In-One Security Kit web interface /action/iperf OS command injection vulnerability	20 Oct 202200:00	–	talos

NVD

Vulners

Node

AND

goabode iota_all-in-one_security_kit_firmwareMatch6.9z

goabode iota_all-in-one_security_kitMatch-

Node

AND

goabode iota_all-in-one_security_kit_firmwareMatch6.9x

goabode iota_all-in-one_security_kitMatch-

[
  {
    "vendor": "abode systems, inc.",
    "product": "iota All-In-One Security Kit",
    "versions": [
      {
        "version": "6.9X",
        "status": "affected"
      },
      {
        "version": "6.9Z",
        "status": "affected"
      }
    ]
  }
]

Source	Link
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2022-1562

Parameter	Position	Path	Description	CWE
iperf	request body	/action/iperf	An OS command injection vulnerability exists in the /action/iperf functionality where a specially-crafted HTTP request can lead to arbitrary command execution.	CWE-78

17 Jun 2026 04:43Current

9.2Critical risk

Vulners AI Score9.2

CVSS 3.18.8

CVSS 310

EPSS0.05614

SSVC

CWE-78