CVE-2022-33192

Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A XCMD can lead to arbitrary command execution. An attacker can send a sequence of malicious commands to trigger these vulnerabilities.This...

CVE-2022-33192

CVE-2022-33192 is an OS command injection in Abode iota All-In-One Security Kit 6.9X/6.9Z exposed via the testWifiAP XCMD. The vulnerability stems from do_test_wifiap using unsanitized wifi config values (WL_SSID or WL_SSID_HEX) in OS commands constructed and executed with popen, after fetch_wifi...