Abode iota All-in-One Security Kit
Approved changes feed: RSS · Atom
cpe:2.3:h:goabode:iota_all-in-one_security_kit:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Goabode (45fc6176-e125-5dab-8e67-5e3bed5ac6e9) |
|---|---|
| Product | Iota All In One Security Kit (432e811f-16d3-5a49-8ef9-54c79e5cac11) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-35244 |
not_vulnerable | 2026-06-08 05:46:04.345834 |
Details available
CRITICAL (9.8)
A format string injection vulnerability exists in the XCMD getVarHA functionality of abode systems, inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted XCMD can lead to memory corruption, information disclosure, and denial of service. An attacker can send a malicious XML payload to trigger this vulnerability.
Published: 2022-10-25T16:34:01.040Z
Updated: 2025-04-15T18:45:04.949Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-33938 |
not_vulnerable | 2026-06-08 05:44:51.763338 |
Details available
HIGH (8.2)
A format string injection vulnerability exists in the ghome_process_control_packet functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted XCMD can lead to memory corruption, information disclosure and denial of service. An attacker can send a malicious XML payload to trigger this vulnerability.
Published: 2022-10-25T16:33:58.055Z
Updated: 2025-04-15T18:45:24.390Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-33189 |
not_vulnerable | 2026-06-08 05:44:46.359616 |
Details available
CRITICAL (10)
An OS command injection vulnerability exists in the XCMD setAlexa functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z. A specially-crafted XCMD can lead to arbitrary command execution. An attacker can send a malicious XML payload to trigger this vulnerability.
Published: 2022-10-25T16:33:48.021Z
Updated: 2025-04-15T18:46:47.862Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32775 |
not_vulnerable | 2026-06-08 05:44:45.779143 |
Details available
CRITICAL (9)
An integer overflow vulnerability exists in the web interface /action/ipcamRecordPost functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to memory corruption. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Published: 2022-10-25T16:33:46.088Z
Updated: 2025-04-15T18:47:02.422Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32773 |
not_vulnerable | 2026-06-08 05:44:45.774201 |
Details available
CRITICAL (10)
An OS command injection vulnerability exists in the XCMD doDebug functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted XCMD can lead to arbitrary command execution. An attacker can send a malicious XML payload to trigger this vulnerability.
Published: 2022-10-25T16:33:45.118Z
Updated: 2025-04-15T18:47:10.133Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32760 |
not_vulnerable | 2026-06-08 05:44:45.762073 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32586 |
not_vulnerable | 2026-06-08 05:44:45.236668 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32574 |
not_vulnerable | 2026-06-08 05:44:45.153661 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32454 |
not_vulnerable | 2026-06-08 05:44:43.342571 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30603 |
not_vulnerable | 2026-06-08 05:43:38.640011 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30541 |
not_vulnerable | 2026-06-08 05:43:38.278387 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29889 |
not_vulnerable | 2026-06-08 05:42:49.588300 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29520 |
not_vulnerable | 2026-06-08 05:42:48.416091 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29477 |
not_vulnerable | 2026-06-08 05:42:47.956177 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29475 |
not_vulnerable | 2026-06-08 05:42:47.951691 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29472 |
not_vulnerable | 2026-06-08 05:42:47.825286 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27805 |
not_vulnerable | 2026-06-08 05:42:43.327579 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27804 |
not_vulnerable | 2026-06-08 05:42:43.326104 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-8105 |
not_vulnerable | 2026-06-08 05:27:14.822376 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.