What is CVE-2022-29475?

CVE-2022-29475 is an information disclosure vulnerability in the XFINDER functionality of the Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z.

What is the severity of CVE-2022-29475?

The severity of CVE-2022-29475 is high with a CVSS score of 8.1.

How does CVE-2022-29475 affect the Abode Systems, Inc. iota All-In-One Security Kit?

CVE-2022-29475 allows a specially-crafted man-in-the-middle attack to lead to increased privileges in the Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z.

How can an attacker exploit CVE-2022-29475?

An attacker can perform a man-in-the-middle attack to exploit CVE-2022-29475 and gain increased privileges.

Is there a fix for CVE-2022-29475?

Currently, there is no known fix for CVE-2022-29475. It is recommended to follow the vendor's security advisories for updates and patches.

Vulnerability/
CVE-2022-29475

high

8.1

CWE

294

25/10/2022

16/9/2024

CVE-2022-29475

First published: Tue Oct 25 2022(Updated: )

An information disclosure vulnerability exists in the XFINDER functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted man-in-the-middle attack can lead to increased privileges. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.

Credit: talos-cna@cisco.com

Affected Software	Affected Version	How to fix
Goabode Iota All-in-one Security Kit Firmware	=6.9z
Goabode Iota All-in-one Security Kit
Goabode Iota All-in-one Security Kit Firmware	=6.9x

Never miss a vulnerability like this again

Reference Links

https://talosintelligence.com/vulnerability_reports/TALOS-2022-1553

Frequently Asked Questions

What is CVE-2022-29475?
CVE-2022-29475 is an information disclosure vulnerability in the XFINDER functionality of the Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z.
What is the severity of CVE-2022-29475?
The severity of CVE-2022-29475 is high with a CVSS score of 8.1.
How does CVE-2022-29475 affect the Abode Systems, Inc. iota All-In-One Security Kit?
CVE-2022-29475 allows a specially-crafted man-in-the-middle attack to lead to increased privileges in the Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z.
How can an attacker exploit CVE-2022-29475?
An attacker can perform a man-in-the-middle attack to exploit CVE-2022-29475 and gain increased privileges.
Is there a fix for CVE-2022-29475?
Currently, there is no known fix for CVE-2022-29475. It is recommended to follow the vendor's security advisories for updates and patches.

collector/nvd-index
agent/type
agent/softwarecombine
agent/severity
agent/weakness
agent/references
agent/tags
agent/author
agent/description
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/event
agent/first-publish-date
agent/source
vendor/goabode
canonical/goabode iota all-in-one security kit firmware
version/goabode iota all-in-one security kit firmware/6.9z
canonical/goabode iota all-in-one security kit
version/goabode iota all-in-one security kit firmware/6.9x

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.