← Back to browse · API

CVE-2022-32773

Severity
CRITICAL
CVSS
10.0
EPSS
0.03351
Risk score
41.17
CISA KEV
No
PoC
No
Published
2022-10-25
Modified
2025-04-15
First seen
2026-08-07
Aliases
EUVD-2022-35839, GHSA-J9FH-QX7V-PP25
Products
abode systems, inc.:iota All-In-One Security Kit 6.9X, abode systems, inc.:iota All-In-One Security Kit 6.9Z
Sources
euvd EUVD-2022-35839

Description

An OS command injection vulnerability exists in the XCMD doDebug functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted XCMD can lead to arbitrary command execution. An attacker can send a malicious XML payload to trigger this vulnerability.

References