Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveTalosCVE-2022-33192
HistoryOct 25, 2022 - 5:15 p.m.

CVE-2022-33192

2022-10-2517:15:52
CWE-78
talos
web.nvd.nist.gov
36
2
cve-2022-33192
os command injection
abode systems
inc.
iota all-in-one security kit
nvd
vulnerability

CVSS3

10

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

10

Confidence

High

EPSS

0.003

Percentile

65.8%

JSON

Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A XCMD can lead to arbitrary command execution. An attacker can send a sequence of malicious commands to trigger these vulnerabilities.This vulnerability specifically focuses on the unsafe use of the WL_SSID and WL_SSID_HEX configuration values in the function at offset 0x1c7d28 of firmware 6.9Z.

Affected configurations

Nvd
Vulners
Node
goabodeiota_all-in-one_security_kit_firmwareMatch6.9x
OR
goabodeiota_all-in-one_security_kit_firmwareMatch6.9z
VendorProductVersionCPE
goabodeiota_all-in-one_security_kit_firmware6.9xcpe:2.3:o:goabode:iota_all-in-one_security_kit_firmware:6.9x:*:*:*:*:*:*:*
goabodeiota_all-in-one_security_kit_firmware6.9zcpe:2.3:o:goabode:iota_all-in-one_security_kit_firmware:6.9z:*:*:*:*:*:*:*

CNA Affected

[
  {
    "vendor": "abode systems, inc.",
    "product": "iota All-In-One Security Kit",
    "versions": [
      {
        "version": "6.9X",
        "status": "affected"
      },
      {
        "version": "6.9Z",
        "status": "affected"
      }
    ]
  }
]

Social References

More

Related

cvelist 1
prion 1
nvd 1
talos 1
talosblog 2
cvelist
cvelist
CVE-2022-33192
2022-10-25 16:33:49
prion
prion
Command injection
2022-10-25 17:15:00
nvd
nvd
CVE-2022-33192
2022-10-25 17:15:52
talos
talos
Abode Systems, Inc. iota All-In-One Security Kit XCMD testWifiAP OS command injection vulnerabilities
2022-10-20 00:00:00
talosblog
talosblog
Vulnerability Spotlight: Vulnerabilities in Abode Systems home security kit could allow attacker to take over cameras, remotely disable them
2022-10-20 13:27:00
Vulnerability Spotlight: Vulnerabilities in Abode Systems home security kit could allow attacker to take over cameras, remotely disable them
2022-10-20 13:27:00

CVSS3

10

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

10

Confidence

High

EPSS

0.003

Percentile

65.8%

JSON
Related for CVE-2022-33192
cvelist1prion1nvd1talos1talosblog2