PT-2022-21457
CVE-2022-32775
·
تاريخ النشر
2022-10-25
·
تاريخ التحديث
2022-10-26
الوصف من
CVSS 3.1
9.0
حرجةالمقاييسAV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Abode Systems, Inc. iota All-In-One Security Kit versions 6.9X through 6.9Z
Description
An integer overflow issue exists in the web interface
/action/ipcamRecordPost functionality. A specially-crafted HTTP request can lead to memory corruption. An attacker can make an authenticated HTTP request to trigger this issue.Recommendations
For versions 6.9X through 6.9Z, consider restricting access to the
/action/ipcamRecordPost API endpoint until a patch is available.
As a temporary workaround, avoid using the /action/ipcamRecordPost functionality in the web interface until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this issue.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾