CVE-2022-35881

The CVE-2022-35881 issue affects Abode Systems’ iota All-In-One Security Kit (firmware 6.9Z/6.9X) via UPnP logging format string injections. TALOS details show multiple vulnerable code paths in the UPnP handling where attacker-controlled fields (Location, ST, controlURL, and SOAP responses) are i...