abode systems, inc.

Records40All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical25CVSS 9.0–10.0

CVSS high13CVSS 7.0–8.9

Exploited now

abode systems, inc. records in CISA KEV

No abode systems, inc. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Iota All-in-one Security Kit Firmware 39 records HIGH Abode 1 record LOW

Records

40 records

TI-2022-15924 CVE-2022-35244 · GHSA-pf44-6c4p-6mp7

A format string injection vulnerability exists in the XCMD getVarHA functionality of…

HIGH 82

A format string injection vulnerability exists in the XCMD getVarHA functionality of abode systems, inc.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01408 Published 2022-10-25 No fix listed CWE-134

TI-2022-14636 CVE-2022-33207 · GHSA-536p-5vmg-wqmx

OS command injection in abode systems, inc. iota All-In-One Security Kit

HIGH 82

Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.04525 Published 2022-10-25 No fix listed CWE-78

TI-2022-14635 CVE-2022-33206 · GHSA-4v9h-r88h-8rcv

OS command injection in abode systems, inc. iota All-In-One Security Kit

HIGH 82

Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.04525 Published 2022-10-25 No fix listed CWE-78

TI-2022-14634 CVE-2022-33205 · GHSA-pfpr-x72v-6vh3

OS command injection in abode systems, inc. iota All-In-One Security Kit

HIGH 82

Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.04525 Published 2022-10-25 No fix listed CWE-78

TI-2022-14633 CVE-2022-33204 · GHSA-g5r9-4hpg-33p3

OS command injection in abode systems, inc. iota All-In-One Security Kit

HIGH 82

Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.04525 Published 2022-10-25 No fix listed CWE-78

TI-2022-14627 CVE-2022-33195 · GHSA-r757-rrmf-xpw5

OS command injection in abode systems, inc. iota All-In-One Security Kit

HIGH 82

Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03417 Published 2022-10-25 No fix listed CWE-78

TI-2022-14626 CVE-2022-33194 · GHSA-3q62-89h6-6qhx

OS command injection in abode systems, inc. iota All-In-One Security Kit

HIGH 82

Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03324 Published 2022-10-25 No fix listed CWE-78

TI-2022-14625 CVE-2022-33193 · GHSA-29qf-rp4c-j9r3

OS command injection in abode systems, inc. iota All-In-One Security Kit

HIGH 82

Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03324 Published 2022-10-25 No fix listed CWE-78

TI-2022-14624 CVE-2022-33192 · GHSA-33vv-xpr4-7w8v

OS command injection in abode systems, inc. iota All-In-One Security Kit

HIGH 82

Four OS command injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03417 Published 2022-10-25 No fix listed CWE-78

TI-2022-14621 CVE-2022-33189 · GHSA-mx4x-66hf-6cqr

OS command injection in abode systems, inc. iota All-In-One Security Kit

HIGH 82

An OS command injection vulnerability exists in the XCMD setAlexa functionality of Abode Systems, Inc.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03645 Published 2022-10-25 No fix listed CWE-78

TI-2022-14316 CVE-2022-32773 · GHSA-j9fh-qx7v-pp25

OS command injection in abode systems, inc. iota All-In-One Security Kit

HIGH 82

An OS command injection vulnerability exists in the XCMD doDebug functionality of Abode Systems, Inc.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03417 Published 2022-10-25 No fix listed CWE-78

TI-2022-14108 CVE-2022-32454 · GHSA-v2qh-p52h-4659

Stack-based buffer overflow in abode systems, inc. iota All-In-One Security Kit

HIGH 82

A stack-based buffer overflow vulnerability exists in the XCMD setIPCam functionality of Abode Systems, Inc.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02035 Published 2022-10-25 No fix listed CWE-121

TI-2022-12697 CVE-2022-30541 · GHSA-9rwh-g3hv-2rjg

OS command injection in abode systems, inc. iota All-In-One Security Kit

HIGH 82

An OS command injection vulnerability exists in the XCMD setUPnP functionality of Abode Systems, Inc.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03344 Published 2022-10-25 No fix listed CWE-78

TI-2022-12244 CVE-2022-29889 · GHSA-q7p9-qp49-wfvq

Hard-coded credentials in abode systems, inc. iota All-In-One Security Kit

HIGH 82

A hard-coded password vulnerability exists in the telnet functionality of Abode Systems, Inc.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01458 Published 2022-10-25 No fix listed CWE-798

TI-2022-11935 CVE-2022-29472 · GHSA-98gv-p34g-p5vg

OS command injection in abode systems, inc. iota All-In-One Security Kit

HIGH 82

An OS command injection vulnerability exists in the web interface util_set_serial_mac functionality of Abode Systems, Inc.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04668 Published 2022-10-25 No fix listed CWE-78

TI-2022-16308 CVE-2022-35877 · GHSA-9x5r-j6v5-h93r

Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality…

HIGH 81

Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01001 Published 2022-10-25 No fix listed CWE-134

TI-2022-16307 CVE-2022-35876 · GHSA-qg76-cc76-5jpx

Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality…

HIGH 81

Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01001 Published 2022-10-25 No fix listed CWE-134

TI-2022-16306 CVE-2022-35875 · GHSA-wrgw-86pw-mvrr

Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality…

HIGH 81

Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01001 Published 2022-10-25 No fix listed CWE-134

TI-2022-16305 CVE-2022-35874 · GHSA-g639-fwp5-v85h

Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality…

HIGH 81

Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01001 Published 2022-10-25 No fix listed CWE-134

TI-2022-14942 CVE-2022-33938 · GHSA-v9xr-q86f-4pqc

A format string injection vulnerability exists in the ghome_process_control_packet…

HIGH 81

A format string injection vulnerability exists in the ghome_process_control_packet functionality of Abode Systems, Inc.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01141 Published 2022-10-25 No fix listed CWE-134

TI-2022-11940 CVE-2022-29477 · GHSA-jp9r-f89v-6j47

Hard-coded credentials in abode systems, inc. iota All-In-One Security Kit

HIGH 81

An authentication bypass vulnerability exists in the web interface /action/factory* functionality of Abode Systems, Inc.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01359 Published 2022-10-25 No fix listed CWE-798

TI-2022-12742 CVE-2022-30603 · GHSA-gqgj-3c9w-9j8m

OS command injection in abode systems, inc. iota All-In-One Security Kit

HIGH 79

An OS command injection vulnerability exists in the web interface /action/iperf functionality of Abode Systems, Inc.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.05614 Published 2022-10-25 No fix listed CWE-78

TI-2022-16318 CVE-2022-35887 · GHSA-j5jp-wrf9-62rx

Four format string injection vulnerabilities exist in the web interface…

HIGH 77

Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode Systems, Inc.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01442 Published 2022-10-25 No fix listed CWE-134

TI-2022-16317 CVE-2022-35886 · GHSA-29j9-ccp8-qccg

Four format string injection vulnerabilities exist in the web interface…

HIGH 77

Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode Systems, Inc.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01442 Published 2022-10-25 No fix listed CWE-134

TI-2022-16316 CVE-2022-35885 · GHSA-mvfv-6h65-v67j

Four format string injection vulnerabilities exist in the web interface…

HIGH 77

Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode Systems, Inc.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01442 Published 2022-10-25 No fix listed CWE-134

Open these records in search →

Critical	25
High	13
Medium	2
Low	0
No CVSS	0