iota all-in-one security kit firmware vulnerabilities and fixes

Recent CVEs affecting iota all-in-one security kit firmware, with upgrade or downgrade steps. 39 tracked.

Also searched as: iota all in one security kit firmware, iotaall-in-onesecuritykitfirmware.

iota all-in-one security kit firmware has 39 tracked vulnerabilities, 25 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-10-25. Highest priority: CVE-2022-33195 (score 67/100).

• CVE-2022-35887 HIGH 8.8 MITIGATE Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality
• CVE-2022-35886 HIGH 8.8 MITIGATE Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality
• CVE-2022-35885 HIGH 8.8 MITIGATE Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality
• CVE-2022-35884 HIGH 8.8 MITIGATE Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality
• CVE-2022-35881 HIGH 8.8 MITIGATE Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc
• CVE-2022-35880 HIGH 8.8 MITIGATE Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc
• CVE-2022-35879 HIGH 8.8 MITIGATE Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc
• CVE-2022-35878 HIGH 8.8 MITIGATE Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc
• CVE-2022-35877 CRITICAL 9.8 MITIGATE Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc
• CVE-2022-35876 CRITICAL 9.8 MITIGATE Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc
• CVE-2022-35875 CRITICAL 9.8 MITIGATE Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc
• CVE-2022-35874 CRITICAL 9.8 MITIGATE Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc
• CVE-2022-35244 CRITICAL 9.8 MITIGATE A format string injection vulnerability exists in the XCMD getVarHA functionality of abode systems, inc
• CVE-2022-33938 CRITICAL 9.8 MITIGATE A format string injection vulnerability exists in the ghome_process_control_packet functionality of Abode Syst
• CVE-2022-33207 CRITICAL 9.9 MITIGATE Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of
• CVE-2022-33206 CRITICAL 9.9 MITIGATE Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of
• CVE-2022-33205 CRITICAL 9.9 MITIGATE Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of
• CVE-2022-33204 CRITICAL 9.9 MITIGATE Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of
• CVE-2022-33195 CRITICAL 10.0 MITIGATE Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc
• CVE-2022-33194 CRITICAL 10.0 MITIGATE Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc
• CVE-2022-33193 CRITICAL 10.0 MITIGATE Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc
• CVE-2022-33192 CRITICAL 10.0 MITIGATE Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc
• CVE-2022-33189 CRITICAL 9.8 MITIGATE An OS command injection vulnerability exists in the XCMD setAlexa functionality of Abode Systems, Inc
• CVE-2022-32775 HIGH 8.8 MITIGATE An integer overflow vulnerability exists in the web interface /action/ipcamRecordPost functionality of Abode S
• CVE-2022-32773 CRITICAL 9.8 MITIGATE An OS command injection vulnerability exists in the XCMD doDebug functionality of Abode Systems, Inc
• CVE-2022-32760 HIGH 7.5 MITIGATE A denial of service vulnerability exists in the XCMD doDebug functionality of Abode Systems, Inc
• CVE-2022-32586 HIGH 8.8 MITIGATE An OS command injection vulnerability exists in the web interface /action/ipcamRecordPost functionality of Abo
• CVE-2022-32574 MEDIUM 6.5 MITIGATE A double-free vulnerability exists in the web interface /action/ipcamSetParamPost functionality of Abode Syste
• CVE-2022-32454 CRITICAL 9.8 MITIGATE A stack-based buffer overflow vulnerability exists in the XCMD setIPCam functionality of Abode Systems, Inc
• CVE-2022-30603 HIGH 8.8 MITIGATE An OS command injection vulnerability exists in the web interface /action/iperf functionality of Abode Systems
• CVE-2022-30541 CRITICAL 9.8 MITIGATE An OS command injection vulnerability exists in the XCMD setUPnP functionality of Abode Systems, Inc
• CVE-2022-29889 CRITICAL 9.8 MITIGATE A hard-coded password vulnerability exists in the telnet functionality of Abode Systems, Inc
• CVE-2022-29520 CRITICAL 9.8 MITIGATE An OS command injection vulnerability exists in the console_main_loop :sys functionality of Abode Systems, Inc
• CVE-2022-29477 CRITICAL 9.8 MITIGATE An authentication bypass vulnerability exists in the web interface /action/factory* functionality of Abode Sys
• CVE-2022-29475 HIGH 8.1 MITIGATE An information disclosure vulnerability exists in the XFINDER functionality of Abode Systems, Inc
• CVE-2022-29472 CRITICAL 9.8 MITIGATE An OS command injection vulnerability exists in the web interface util_set_serial_mac functionality of Abode S
• CVE-2022-27805 CRITICAL 9.8 MITIGATE An authentication bypass vulnerability exists in the GHOME control functionality of Abode Systems, Inc
• CVE-2022-27804 CRITICAL 9.8 MITIGATE An os command injection vulnerability exists in the web interface util_set_abode_code functionality of Abode S
• CVE-2020-8105 CRITICAL 9.6 UPGRADE OS Command Injection vulnerability in the wirelessConnect handler of Abode iota All-In-One Security Kit allows

FAQ

How do I fix iota all-in-one security kit firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is iota all-in-one security kit firmware being exploited right now?

None of the tracked iota all-in-one security kit firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which iota all-in-one security kit firmware CVE should I patch first?

CVE-2022-33195 currently ranks highest (67/100): Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc.

RSS feed for iota all-in-one security kit firmware · ← Back to latest CVEs