EUVD-2022-38136

Malicious code in bioql PyPI...

Command injection

Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A XCMD can lead to arbitrary command execution. An attacker can send a sequence of malicious commands to trigger these vulnerabilities.This...

PT-2022-21446 · Abode Systems · Iota All-In-One Security Kit

Name of the Vulnerable Software and Affected Versions: Abode Systems, Inc. iota All-In-One Security Kit versions 6.9X through 6.9Z Description: A denial of service issue exists in the XCMD doDebug functionality. This can be triggered by a specially-crafted XCMD, allowing an attacker to send a...