PT-2022-21732
CVE-2022-33192
·
تاريخ النشر
2022-10-25
·
تاريخ التحديث
2022-10-26
الوصف من
CVSS 3.1
10
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Abode Systems, Inc. iota All-In-One Security Kit versions 6.9X and 6.9Z
Description
The issue is related to OS command injection vulnerabilities in the XCMD testWifiAP functionality. These vulnerabilities can lead to arbitrary command execution. An attacker can exploit this by sending a sequence of malicious commands. The vulnerability specifically involves the unsafe use of the
WL SSID and WL SSID HEX configuration values in a function.Recommendations
For version 6.9X, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For version 6.9Z, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾