CVE-2022-30541: OS Command Injection
First published: Tue Oct 25 2022(Updated: )
An OS command injection vulnerability exists in the XCMD setUPnP functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted XCMD can lead to arbitrary command execution. An attacker can send a malicious XML payload to trigger this vulnerability.
Credit: talos-cna@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Goabode Iota All-in-one Security Kit Firmware | =6.9z | |
| Goabode Iota All-in-one Security Kit | ||
| Goabode Iota All-in-one Security Kit Firmware | =6.9x |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2022-30541.
What is the severity of CVE-2022-30541?
The severity of CVE-2022-30541 is critical with a CVSS score of 9.8.
What is the affected software for CVE-2022-30541?
The affected software for CVE-2022-30541 is Goabode Iota All-in-one Security Kit Firmware versions 6.9X and 6.9Z.
How does the vulnerability CVE-2022-30541 work?
The vulnerability CVE-2022-30541 is an OS command injection vulnerability in the XCMD setUPnP functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. An attacker can send a specially-crafted XCMD to execute arbitrary commands.
Is Goabode Iota All-in-one Security Kit vulnerable to CVE-2022-30541?
No, Goabode Iota All-in-one Security Kit is not vulnerable to CVE-2022-30541.
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/tags
- agent/type
- agent/event
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/goabode
- canonical/goabode iota all-in-one security kit firmware
- version/goabode iota all-in-one security kit firmware/6.9z
- canonical/goabode iota all-in-one security kit
- version/goabode iota all-in-one security kit firmware/6.9x