CVE-2022-32760

Name of the Vulnerable Software and Affected Versions Abode Systems, Inc. iota All-In-One Security Kit versions 6.9X through 6.9Z

Description A denial of service issue exists in the XCMD doDebug functionality. This can be triggered by a specially-crafted XCMD, allowing an attacker to send a malicious XML payload and cause a denial of service.

Recommendations For versions 6.9X through 6.9Z, consider disabling the XCMD doDebug functionality as a temporary workaround until a patch is available. Restrict access to the XCMD functionality to minimize the risk of exploitation.