critical9.8
CVE-2022-27805
An authentication bypass vulnerability exists in the GHOME control functionality of Abode Systems, Inc.
Impact
An authentication bypass vulnerability exists in the GHOME control functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted network request can lead to arbitrary XCMD execution. An attacker can send a malicious XML payload to trigger this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Goabode | Iota All-In-One Security Kit Firmware | Versions 6.9z, 6.9x |