Iota All In One Security Kit
Approved changes feed: RSS · Atom
cpe:2.3:a:abode_systems,_inc.:iota_all-in-one_security_kit:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Abode Systems, Inc. (abda393b-dea3-53df-8ebc-e4d0f74a21a7) |
|---|---|
| Product | Iota All In One Security Kit (41d2cd33-cfc5-5190-bbd5-48f9d0984142) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-35887 |
vulnerable | 2026-06-08 05:46:05.921859 |
Details available
HIGH (8.2)
Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted HTTP request can lead to memory corruption, information disclosure and denial of service. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerability arises from format string injection via the `default_key_id` HTTP parameter, as used within the `/action/wirelessConnect` handler.
Published: 2022-10-25T16:34:24.333Z
Updated: 2025-04-15T18:41:27.106Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35886 |
vulnerable | 2026-06-08 05:46:05.921481 |
Details available
HIGH (8.2)
Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted HTTP request can lead to memory corruption, information disclosure and denial of service. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerability arises from format string injection via the `default_key_id` and `key` HTTP parameters, as used within the `/action/wirelessConnect` handler.
Published: 2022-10-25T16:34:23.373Z
Updated: 2025-04-15T18:41:35.798Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35885 |
vulnerable | 2026-06-08 05:46:05.920971 |
Details available
HIGH (8.2)
Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted HTTP request can lead to memory corruption, information disclosure and denial of service. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerability arises from format string injection via the `wpapsk_hex` HTTP parameter, as used within the `/action/wirelessConnect` handler.
Published: 2022-10-25T16:34:22.339Z
Updated: 2025-04-15T18:41:46.855Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35884 |
vulnerable | 2026-06-08 05:46:05.920578 |
Details available
HIGH (8.2)
Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted HTTP request can lead to memory corruption, information disclosure and denial of service. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerability arises from format string injection via the `ssid_hex` HTTP parameter, as used within the `/action/wirelessConnect` handler.
Published: 2022-10-25T16:34:21.353Z
Updated: 2025-04-15T18:41:57.938Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35881 |
vulnerable | 2026-06-08 05:46:05.913653 |
Details available
HIGH (7.1)
Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted UPnP negotiation can lead to memory corruption, information disclosure, and denial of service. An attacker can host a malicious UPnP service to trigger these vulnerabilities.This vulnerability arises from format string injection via `errorCode` and `errorDescription` XML tags, as used within the `DoUpdateUPnPbyService` action handler.
Published: 2022-10-25T16:34:20.328Z
Updated: 2025-04-15T18:42:12.665Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35880 |
vulnerable | 2026-06-08 05:46:05.913205 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35879 |
vulnerable | 2026-06-08 05:46:05.912756 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35878 |
vulnerable | 2026-06-08 05:46:05.912282 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35877 |
vulnerable | 2026-06-08 05:46:05.911737 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35876 |
vulnerable | 2026-06-08 05:46:05.911379 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35875 |
vulnerable | 2026-06-08 05:46:05.911016 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35874 |
vulnerable | 2026-06-08 05:46:05.910509 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35244 |
vulnerable | 2026-06-08 05:46:04.344258 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-33938 |
vulnerable | 2026-06-08 05:44:51.763173 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-33207 |
vulnerable | 2026-06-08 05:44:46.499537 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-33206 |
vulnerable | 2026-06-08 05:44:46.498787 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-33205 |
vulnerable | 2026-06-08 05:44:46.498292 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-33204 |
vulnerable | 2026-06-08 05:44:46.497868 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-33195 |
vulnerable | 2026-06-08 05:44:46.364946 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-33194 |
vulnerable | 2026-06-08 05:44:46.364491 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-33193 |
vulnerable | 2026-06-08 05:44:46.364024 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-33192 |
vulnerable | 2026-06-08 05:44:46.363666 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-33189 |
vulnerable | 2026-06-08 05:44:46.359439 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32775 |
vulnerable | 2026-06-08 05:44:45.778974 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32773 |
vulnerable | 2026-06-08 05:44:45.774067 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32760 |
vulnerable | 2026-06-08 05:44:45.762007 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32586 |
vulnerable | 2026-06-08 05:44:45.236484 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32574 |
vulnerable | 2026-06-08 05:44:45.153459 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32454 |
vulnerable | 2026-06-08 05:44:43.341084 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30603 |
vulnerable | 2026-06-08 05:43:38.639942 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30541 |
vulnerable | 2026-06-08 05:43:38.276446 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29889 |
vulnerable | 2026-06-08 05:42:49.588240 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29520 |
vulnerable | 2026-06-08 05:42:48.416023 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29477 |
vulnerable | 2026-06-08 05:42:47.955919 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29475 |
vulnerable | 2026-06-08 05:42:47.951625 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29472 |
vulnerable | 2026-06-08 05:42:47.825226 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27805 |
vulnerable | 2026-06-08 05:42:43.327430 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27804 |
vulnerable | 2026-06-08 05:42:43.324271 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.