CVE-2022-35875: Use of Externally-Controlled Format String

Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. Specially-crafted configuration values can lead to memory corruption, information disclosure and denial of service. An attacker can modify a...

PT-2022-22987

Name of the Vulnerable Software and Affected Versions Abode Systems, Inc. iota All-In-One Security Kit versions 6.9X and 6.9Z Description The issue arises from format string injection via the default key id and key configuration parameters within the testWifiAP XCMD handler. Specially-crafted...

PT-2022-22997 · Abode Systems · Iota All-In-One Security Kit

Name of the Vulnerable Software and Affected Versions: Abode Systems, Inc. iota All-In-One Security Kit versions 6.9Z and 6.9X Description: The issue arises from format string injection via the default key id HTTP parameter in the /action/wirelessConnect handler. A specially-crafted HTTP request...

PT-2022-22994 · Abode Systems · Iota All-In-One Security Kit

Name of the Vulnerable Software and Affected Versions: Abode Systems, Inc. iota All-In-One Security Kit versions 6.9Z through 6.9X Description: The web interface of the affected system has format string injection vulnerabilities in the /action/wirelessConnect functionality. A specially-crafted HT...

PT-2022-22651 · Unknown · Iota All-In-One Security Kit

Name of the Vulnerable Software and Affected Versions: iota All-In-One Security Kit versions 6.9X and 6.9Z Description: A format string injection issue exists in the XCMD getVarHA functionality, allowing a specially-crafted XCMD to cause memory corruption, information disclosure, and denial of...

PT-2022-22990 · Abode Systems · Iota All-In-One Security Kit

Name of the Vulnerable Software and Affected Versions: Abode Systems, Inc. iota All-In-One Security Kit versions 6.9Z and 6.9X Description: The issue arises from format string injection via the controlURL XML tag within the DoUpdateUPnPbyService action handler. This can be triggered by a...

PT-2022-22991 · Abode Systems · Iota All-In-One Security Kit

Name of the Vulnerable Software and Affected Versions: Abode Systems, Inc. iota All-In-One Security Kit versions 6.9Z through 6.9X Description: Four format string injection issues exist in the UPnP logging functionality. A specially-crafted UPnP negotiation can lead to memory corruption,...

PT-2022-22996 · Abode Systems · Iota All-In-One Security Kit

Name of the Vulnerable Software and Affected Versions: Abode Systems, Inc. iota All-In-One Security Kit versions 6.9Z through 6.9X Description: The web interface /action/wirelessConnect functionality contains format string injection vulnerabilities. A specially-crafted HTTP request can lead to...

Abode Iota: Format string error vulnerability

Abode Iota is a reliable Diy home security system from Abode. Abode Iota All-In-One Security Kit versions 6.9X and 6.9Z have a format string error vulnerability that stems from a format string injection vulnerability in the XCMD testWifiAP feature, which allows an attacker to modify the...

Abode Iota: Format string error vulnerability

Abode Iota is a reliable Diy home security system from Abode. A format string error vulnerability exists in Abode Iota All-In-One Security Kit versions 6.9X and 6.9Z, which stems from a format string injection vulnerability in the XCMD testWifiAP feature, which allows an attacker to modify the...

Abode Iota: Format string error vulnerability

Abode Iota is a reliable Diy home security system from Abode. A format string error vulnerability exists in Abode Iota All-In-One Security Kit versions 6.9X and 6.9Z. The vulnerability stems from a format string injection vulnerability in the XCMD testWifiAP feature, which allows an attacker to...

Abode Iota: Format string error vulnerability

Abode Iota is a reliable Diy home security system from Abode. A format string error vulnerability exists in Abode Iota All-In-One Security Kit versions 6.9X and 6.9Z. The vulnerability stems from a format string injection vulnerability in the XCMD testWifiAP feature, which allows an attacker to...

PT-2022-22995

Name of the Vulnerable Software and Affected Versions Abode Systems, Inc. iota All-In-One Security Kit versions 6.9Z and 6.9X Description The issue arises from format string injection via the wpapsk hex HTTP parameter in the /action/wirelessConnect handler. A specially-crafted HTTP request can le...

PT-2022-22986 · Abode Systems · Iota All-In-One Security Kit

Name of the Vulnerable Software and Affected Versions: Abode Systems, Inc. iota All-In-One Security Kit versions 6.9X and 6.9Z Description: The issue arises from format string injection via the wpapsk configuration parameter within the testWifiAP XCMD handler. Specially-crafted configuration valu...

PT-2022-21925 · Abode Systems · Iota All-In-One Security Kit

Name of the Vulnerable Software and Affected Versions: Abode Systems, Inc. iota All-In-One Security Kit versions 6.9Z and 6.9X Description: A format string injection issue exists in the ghome process control packet functionality. This can be triggered by a specially-crafted XCMD, leading to memor...

CVE-2022-33938: Use of Externally-Controlled Format String

A format string injection vulnerability exists in the ghomeprocesscontrolpacket functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted XCMD can lead to memory corruption, information disclosure and denial of service. An attacker can send a malicious X...

CVE-2022-35880: Use of Externally-Controlled Format String

Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted UPnP negotiation can lead to memory corruption, information disclosure, and denial of service. An attacker can host a malicio...

PT-2022-22992

Name of the Vulnerable Software and Affected Versions Abode Systems, Inc. iota All-In-One Security Kit versions 6.9Z and 6.9X Description The issue arises from format string injection vulnerabilities in the UPnP logging functionality. A specially-crafted UPnP negotiation can lead to memory...

CVE-2022-35881: Use of Externally-Controlled Format String

Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted UPnP negotiation can lead to memory corruption, information disclosure, and denial of service. An attacker can host a malicio...

openSUSE 15 Security Update : v4l2loopback (openSUSE-SU-2022:10160-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:10160-1 advisory. - Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility fo...