CVE-2022-35877

🗓️ 25 Oct 2022 16:34:16Reported by talosType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 71 Views

CVE-2022-35877 Four format string injection vulnerabilities in Abode Systems' iota All-In-One Security Kit 6.9X and 6.9Z allow memory corruption, information disclosure, and denial of service. Attackers can exploit this via specially-crafted configuration values to trigger the vulnerabilities

Reporter	Title	Published	Views	Family All 11
CNNVD	Abode Iota 格式化字符串错误漏洞	25 Oct 202200:00	–	cnnvd
Cvelist	CVE-2022-35877	25 Oct 202216:34	–	cvelist
EUVD	EUVD-2022-38750	3 Oct 202520:07	–	euvd
NVD	CVE-2022-35877	25 Oct 202217:15	–	nvd
Prion	Format string	25 Oct 202217:15	–	prion
Positive Technologies	PT-2022-22988 · Abode Systems · Iota All-In-One Security Kit	25 Oct 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-35877	5 Feb 202518:50	–	redhatcve
Talos	Abode Systems, Inc. iota All-In-One Security Kit XCMD testWifiAP format string injection vulnerabilities	20 Oct 202200:00	–	talos
Talos Blog	Vulnerability Spotlight: Vulnerabilities in Abode Systems home security kit could allow attacker to take over cameras, remotely disable them	20 Oct 202213:27	–	talosblog
Talos Blog	Vulnerability Spotlight: Vulnerabilities in Abode Systems home security kit could allow attacker to take over cameras, remotely disable them	20 Oct 202213:27	–	talosblog

NVD

Vulners

Node

goabode iota_all-in-one_security_kit_firmwareMatch6.9x

goabode iota_all-in-one_security_kit_firmwareMatch6.9z

[
  {
    "vendor": "abode systems, inc.",
    "product": "iota All-In-One Security Kit",
    "versions": [
      {
        "version": "6.9X",
        "status": "affected"
      },
      {
        "version": "6.9Z",
        "status": "affected"
      }
    ]
  }
]

Source	Link
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2022-1581

21 Nov 2024 07:11Current

9.4High risk

Vulners AI Score9.4

CVSS 3.19.8

CVSS 38.2

EPSS0.00504

SSVC

CWE-134