CVE-2022-35884

CVE-2022-35884 concerns Abode Systems iota All-In-One Security Kit (versions 6.9Z–6.9X). The vulnerability is a format string injection in the web interface’s /action/wirelessConnect handler, triggered via the ssid_hex parameter in authenticated HTTP requests. The flaw can cause memory corruption...

Vulnerability Spotlight: Vulnerabilities in Abode Systems home security kit could allow attacker to take over cameras, remotely disable them

Matt Wiseman of Cisco Talos discovered these vulnerabilities. Cisco Talos recently discovered several vulnerabilities in the Abode Systems iota All-In-One Security Kit. This kit includes a main security camera and hub that can alert users of unwanted movement in their homes. It also includes...