Lucene search
PRIOn knowledge basePRION:CVE-2022-32586HistoryOct 25, 2022 - 5:15 p.m.
Command injection
2022-10-2517:15:00
PRIOn knowledge base
www.prio-n.com
2
command injection
web interface
abode systems
arbitrary execution
http request
vulnerability
An OS command injection vulnerability exists in the web interface /action/ipcamRecordPost functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| iota_all-in-one_security_kit_firmware | eq | 6.9.122 | |
| iota_all-in-one_security_kit_firmware | eq | 6.9.120 |
Related
cve
cve
CVE-2022-32586
2022-10-25 17:15:52
nvd
nvd
CVE-2022-32586
2022-10-25 17:15:52
talos
talos
cvelist
cvelist
CVE-2022-32586
2022-10-20 00:00:00
talosblog
talosblog