CVE-2022-32760

Summary

A denial of service vulnerability exists in the XCMD doDebug functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted XCMD can lead to denial of service. An attacker can send a malicious XML payload to trigger this vulnerability.

Affected Software

VendorProductVersion RangeStatus
abode systems, inc.iota All-In-One Security Kit6.9Xaffected
abode systems, inc.iota All-In-One Security Kit6.9Zaffected

Weaknesses

  • CWE-489: CWE-489: Leftover Debug Code

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: poc
    • Automatable: yes
    • Technical Impact: partial

References