critical9.8
CVE-2022-33189
An OS command injection vulnerability exists in the XCMD setAlexa functionality of Abode Systems, Inc.
Impact
An OS command injection vulnerability exists in the XCMD setAlexa functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z. A specially-crafted XCMD can lead to arbitrary command execution. An attacker can send a malicious XML payload to trigger this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Goabode | Iota All-In-One Security Kit Firmware | Version 6.9z |