This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2022-33938 | BDVDB-2026-187239 Detail

abode systemsiota All-In-One Security Kit

Description#

A format string injection vulnerability exists in the ghome_process_control_packet functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted XCMD can lead to memory corruption, information disclosure and denial of service. An attacker can send a malicious XML payload to trigger this vulnerability.

Impact#

Per CVSS v3.0: confidentiality impact none, integrity impact low, availability impact high. Attack vector: network.

Weaknesses#

  • CWE-134 Use of Externally-Controlled Format String

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.