CVE-2022-32773

Name of the Vulnerable Software and Affected Versions iota All-In-One Security Kit versions 6.9X and 6.9Z

Description A command injection issue exists in the XCMD doDebug functionality, allowing for arbitrary command execution through a specially-crafted XCMD. This can be triggered by sending a malicious XML payload.

Recommendations For versions 6.9X and 6.9Z, consider disabling the XCMD doDebug functionality as a temporary workaround until a patch is available. Restrict access to the XCMD functionality to minimize the risk of exploitation. Avoid using the XCMD doDebug functionality until the issue is resolved.