Command Injection Flaw in Abode Systems iota Security Kit
CVE-2022-29472

10CRITICAL

Key Information:

Vendor
Adobe
Status
Iota All-in-one Security Kit
Vendor
CVE Published:
25 October 2022

Summary

An OS command injection vulnerability impacts the web interface's util_set_serial_mac functionality of Abode Systems, Inc. iota All-In-One Security Kit. By crafting a malicious HTTP request, an attacker could execute arbitrary commands on the device, potentially compromising its security and functionality. Promptly securing devices against this type of threat is essential to maintain safe operation.

Affected Version(s)

iota All-In-One Security Kit 6.9X

iota All-In-One Security Kit 6.9Z

References

https://talosintelligence.com/vulnerability_reports/TALOS...

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.