Skip to main content

Iota All In One Security Kit Firmware

38 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2022-35887 HIGH POC This Week

Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Denial Of Service Buffer Overflow Iota All In One Security Kit Firmware
NVD
CVSS 3.1
8.8
EPSS
1.3%
CVE-2022-35886 HIGH POC This Week

Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Denial Of Service Buffer Overflow Iota All In One Security Kit Firmware
NVD
CVSS 3.1
8.8
EPSS
1.2%
CVE-2022-35885 HIGH POC This Week

Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Denial Of Service Buffer Overflow Iota All In One Security Kit Firmware
NVD
CVSS 3.1
8.8
EPSS
1.2%
CVE-2022-35884 HIGH POC This Week

Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Denial Of Service Buffer Overflow Iota All In One Security Kit Firmware
NVD
CVSS 3.1
8.8
EPSS
1.3%
CVE-2022-35881 HIGH POC This Week

Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Denial Of Service Buffer Overflow Iota All In One Security Kit Firmware
NVD
CVSS 3.1
8.8
EPSS
0.8%
CVE-2022-35880 HIGH POC This Week

Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Denial Of Service Buffer Overflow Iota All In One Security Kit Firmware
NVD
CVSS 3.1
8.8
EPSS
0.8%
CVE-2022-35879 HIGH POC This Week

Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Denial Of Service Buffer Overflow Iota All In One Security Kit Firmware
NVD
CVSS 3.1
8.8
EPSS
0.8%
CVE-2022-35878 HIGH POC This Week

Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Denial Of Service Buffer Overflow Iota All In One Security Kit Firmware
NVD
CVSS 3.1
8.8
EPSS
0.8%
CVE-2022-35877 CRITICAL POC Act Now

Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Denial Of Service Buffer Overflow Iota All In One Security Kit Firmware
NVD
CVSS 3.1
9.8
EPSS
0.9%
CVE-2022-35876 CRITICAL POC Act Now

Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Denial Of Service Buffer Overflow Iota All In One Security Kit Firmware
NVD
CVSS 3.1
9.8
EPSS
0.9%
CVE-2022-35875 CRITICAL POC Act Now

Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Denial Of Service Buffer Overflow Iota All In One Security Kit Firmware
NVD
CVSS 3.1
9.8
EPSS
0.9%
CVE-2022-35874 CRITICAL POC Act Now

Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Denial Of Service Buffer Overflow Iota All In One Security Kit Firmware
NVD
CVSS 3.1
9.8
EPSS
0.9%
CVE-2022-35244 CRITICAL POC Act Now

A format string injection vulnerability exists in the XCMD getVarHA functionality of abode systems, inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Denial Of Service Buffer Overflow Iota All In One Security Kit Firmware
NVD
CVSS 3.1
9.8
EPSS
1.3%
CVE-2022-33938 CRITICAL POC Act Now

A format string injection vulnerability exists in the ghome_process_control_packet functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Denial Of Service Buffer Overflow Iota All In One Security Kit Firmware
NVD
CVSS 3.1
9.8
EPSS
0.9%
CVE-2022-33207 CRITICAL POC Act Now

Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVSS 3.1
9.9
EPSS
4.2%
CVE-2022-33206 CRITICAL POC Act Now

Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVSS 3.1
9.9
EPSS
4.2%
CVE-2022-33205 CRITICAL POC Act Now

Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVSS 3.1
9.9
EPSS
4.2%
CVE-2022-33204 CRITICAL POC Act Now

Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVSS 3.1
9.9
EPSS
4.2%
CVE-2022-33195 CRITICAL POC Act Now

Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVSS 3.1
10.0
EPSS
3.2%
CVE-2022-33194 CRITICAL POC Act Now

Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVSS 3.1
10.0
EPSS
3.1%
CVE-2022-33193 CRITICAL POC Act Now

Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVSS 3.1
10.0
EPSS
3.1%
CVE-2022-33192 CRITICAL POC Act Now

Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVSS 3.1
10.0
EPSS
3.2%
CVE-2022-33189 CRITICAL POC Act Now

An OS command injection vulnerability exists in the XCMD setAlexa functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVSS 3.1
9.8
EPSS
3.2%
CVE-2022-32775 HIGH POC This Week

An integer overflow vulnerability exists in the web interface /action/ipcamRecordPost functionality of Abode Systems, Inc. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Integer Overflow Buffer Overflow Iota All In One Security Kit Firmware
NVD
CVSS 3.1
8.8
EPSS
1.4%
CVE-2022-32773 CRITICAL POC Act Now

An OS command injection vulnerability exists in the XCMD doDebug functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVSS 3.1
9.8
EPSS
3.2%
CVE-2022-32760 HIGH POC This Week

A denial of service vulnerability exists in the XCMD doDebug functionality of Abode Systems, Inc. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Iota All In One Security Kit Firmware
NVD
CVSS 3.1
7.5
EPSS
0.9%
CVE-2022-32586 HIGH POC This Week

An OS command injection vulnerability exists in the web interface /action/ipcamRecordPost functionality of Abode Systems, Inc. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVSS 3.1
8.8
EPSS
3.8%
CVE-2022-32574 MEDIUM POC This Month

A double-free vulnerability exists in the web interface /action/ipcamSetParamPost functionality of Abode Systems, Inc. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Iota All In One Security Kit Firmware
NVD
CVSS 3.1
6.5
EPSS
1.5%
CVE-2022-32454 CRITICAL POC Act Now

A stack-based buffer overflow vulnerability exists in the XCMD setIPCam functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Stack Overflow Buffer Overflow Iota All In One Security Kit Firmware
NVD
CVSS 3.1
9.8
EPSS
1.6%
CVE-2022-30603 HIGH POC This Week

An OS command injection vulnerability exists in the web interface /action/iperf functionality of Abode Systems, Inc. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVSS 3.1
8.8
EPSS
5.3%
CVE-2022-30541 CRITICAL POC Act Now

An OS command injection vulnerability exists in the XCMD setUPnP functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVSS 3.1
9.8
EPSS
3.2%
CVE-2022-29889 CRITICAL POC Act Now

A hard-coded password vulnerability exists in the telnet functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Iota All In One Security Kit Firmware
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2022-29520 CRITICAL POC Act Now

An OS command injection vulnerability exists in the console_main_loop :sys functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVSS 3.1
9.8
EPSS
2.8%
CVE-2022-29477 CRITICAL POC Act Now

An authentication bypass vulnerability exists in the web interface /action/factory* functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Iota All In One Security Kit Firmware
NVD
CVSS 3.1
9.8
EPSS
1.2%
CVE-2022-29475 HIGH POC This Week

An information disclosure vulnerability exists in the XFINDER functionality of Abode Systems, Inc. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Information Disclosure Iota All In One Security Kit Firmware
NVD
CVSS 3.1
8.1
EPSS
0.6%
CVE-2022-29472 CRITICAL POC Act Now

An OS command injection vulnerability exists in the web interface util_set_serial_mac functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVSS 3.1
9.8
EPSS
4.4%
CVE-2022-27805 CRITICAL Act Now

An authentication bypass vulnerability exists in the GHOME control functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Iota All In One Security Kit Firmware
NVD
CVSS 3.1
9.8
EPSS
1.3%
CVE-2022-27804 CRITICAL POC Act Now

An os command injection vulnerability exists in the web interface util_set_abode_code functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVSS 3.1
9.8
EPSS
3.6%
CVE-2022-35887
EPSS 1% CVSS 8.8
HIGH POC This Week

Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Denial Of Service Buffer Overflow +1
NVD
CVE-2022-35886
EPSS 1% CVSS 8.8
HIGH POC This Week

Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Denial Of Service Buffer Overflow +1
NVD
CVE-2022-35885
EPSS 1% CVSS 8.8
HIGH POC This Week

Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Denial Of Service Buffer Overflow +1
NVD
CVE-2022-35884
EPSS 1% CVSS 8.8
HIGH POC This Week

Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Denial Of Service Buffer Overflow +1
NVD
CVE-2022-35881
EPSS 1% CVSS 8.8
HIGH POC This Week

Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Denial Of Service Buffer Overflow +1
NVD
CVE-2022-35880
EPSS 1% CVSS 8.8
HIGH POC This Week

Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Denial Of Service Buffer Overflow +1
NVD
CVE-2022-35879
EPSS 1% CVSS 8.8
HIGH POC This Week

Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Denial Of Service Buffer Overflow +1
NVD
CVE-2022-35878
EPSS 1% CVSS 8.8
HIGH POC This Week

Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Denial Of Service Buffer Overflow +1
NVD
CVE-2022-35877
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Denial Of Service Buffer Overflow +1
NVD
CVE-2022-35876
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Denial Of Service Buffer Overflow +1
NVD
CVE-2022-35875
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Denial Of Service Buffer Overflow +1
NVD
CVE-2022-35874
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Denial Of Service Buffer Overflow +1
NVD
CVE-2022-35244
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A format string injection vulnerability exists in the XCMD getVarHA functionality of abode systems, inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Denial Of Service Buffer Overflow +1
NVD
CVE-2022-33938
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A format string injection vulnerability exists in the ghome_process_control_packet functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Denial Of Service Buffer Overflow +1
NVD
CVE-2022-33207
EPSS 4% CVSS 9.9
CRITICAL POC Act Now

Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVE-2022-33206
EPSS 4% CVSS 9.9
CRITICAL POC Act Now

Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVE-2022-33205
EPSS 4% CVSS 9.9
CRITICAL POC Act Now

Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVE-2022-33204
EPSS 4% CVSS 9.9
CRITICAL POC Act Now

Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVE-2022-33195
EPSS 3% CVSS 10.0
CRITICAL POC Act Now

Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVE-2022-33194
EPSS 3% CVSS 10.0
CRITICAL POC Act Now

Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVE-2022-33193
EPSS 3% CVSS 10.0
CRITICAL POC Act Now

Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVE-2022-33192
EPSS 3% CVSS 10.0
CRITICAL POC Act Now

Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVE-2022-33189
EPSS 3% CVSS 9.8
CRITICAL POC Act Now

An OS command injection vulnerability exists in the XCMD setAlexa functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVE-2022-32775
EPSS 1% CVSS 8.8
HIGH POC This Week

An integer overflow vulnerability exists in the web interface /action/ipcamRecordPost functionality of Abode Systems, Inc. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Integer Overflow Buffer Overflow Iota All In One Security Kit Firmware
NVD
CVE-2022-32773
EPSS 3% CVSS 9.8
CRITICAL POC Act Now

An OS command injection vulnerability exists in the XCMD doDebug functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVE-2022-32760
EPSS 1% CVSS 7.5
HIGH POC This Week

A denial of service vulnerability exists in the XCMD doDebug functionality of Abode Systems, Inc. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Iota All In One Security Kit Firmware
NVD
CVE-2022-32586
EPSS 4% CVSS 8.8
HIGH POC This Week

An OS command injection vulnerability exists in the web interface /action/ipcamRecordPost functionality of Abode Systems, Inc. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVE-2022-32574
EPSS 1% CVSS 6.5
MEDIUM POC This Month

A double-free vulnerability exists in the web interface /action/ipcamSetParamPost functionality of Abode Systems, Inc. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Iota All In One Security Kit Firmware
NVD
CVE-2022-32454
EPSS 2% CVSS 9.8
CRITICAL POC Act Now

A stack-based buffer overflow vulnerability exists in the XCMD setIPCam functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Stack Overflow Buffer Overflow +1
NVD
CVE-2022-30603
EPSS 5% CVSS 8.8
HIGH POC This Week

An OS command injection vulnerability exists in the web interface /action/iperf functionality of Abode Systems, Inc. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVE-2022-30541
EPSS 3% CVSS 9.8
CRITICAL POC Act Now

An OS command injection vulnerability exists in the XCMD setUPnP functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVE-2022-29889
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A hard-coded password vulnerability exists in the telnet functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Iota All In One Security Kit Firmware
NVD
CVE-2022-29520
EPSS 3% CVSS 9.8
CRITICAL POC Act Now

An OS command injection vulnerability exists in the console_main_loop :sys functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVE-2022-29477
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

An authentication bypass vulnerability exists in the web interface /action/factory* functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Iota All In One Security Kit Firmware
NVD
CVE-2022-29475
EPSS 1% CVSS 8.1
HIGH POC This Week

An information disclosure vulnerability exists in the XFINDER functionality of Abode Systems, Inc. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Information Disclosure Iota All In One Security Kit Firmware
NVD
CVE-2022-29472
EPSS 4% CVSS 9.8
CRITICAL POC Act Now

An OS command injection vulnerability exists in the web interface util_set_serial_mac functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD
CVE-2022-27805
EPSS 1% CVSS 9.8
CRITICAL Act Now

An authentication bypass vulnerability exists in the GHOME control functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Iota All In One Security Kit Firmware
NVD
CVE-2022-27804
EPSS 4% CVSS 9.8
CRITICAL POC Act Now

An os command injection vulnerability exists in the web interface util_set_abode_code functionality of Abode Systems, Inc. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Iota All In One Security Kit Firmware
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy