What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2022-32775.

What is the severity level of CVE-2022-32775?

CVE-2022-32775 has a severity level of critical.

How can an attacker exploit CVE-2022-32775?

An attacker can exploit CVE-2022-32775 by sending a specially-crafted HTTP request to trigger memory corruption.

Is there a fix available for CVE-2022-32775?

At the moment, there is no information available about the availability of a fix for CVE-2022-32775. It is recommended to follow the guidance provided by the vendor and apply any security patches or updates as soon as they are released.

Vulnerability/
CVE-2022-32775

critical

CWE

190

20/10/2022

3/8/2024

CVE-2022-32775: Integer Overflow

First published: Thu Oct 20 2022(Updated: )

An integer overflow vulnerability exists in the web interface /action/ipcamRecordPost functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to memory corruption. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Credit: talos-cna@cisco.com

Affected Software	Affected Version	How to fix
Goabode Iota All-in-one Security Kit Firmware	=6.9z
Goabode Iota All-in-one Security Kit
Goabode Iota All-in-one Security Kit Firmware	=6.9x

Never miss a vulnerability like this again

Reference Links

https://talosintelligence.com/vulnerability_reports/TALOS-2022-1564

Frequently Asked Questions

What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-32775.
What is the severity level of CVE-2022-32775?
CVE-2022-32775 has a severity level of critical.
How does CVE-2022-32775 impact Abode Systems, Inc. iota All-In-One Security Kit?
CVE-2022-32775 can lead to memory corruption in the web interface /action/ipcamRecordPost functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z.
How can an attacker exploit CVE-2022-32775?
An attacker can exploit CVE-2022-32775 by sending a specially-crafted HTTP request to trigger memory corruption.
Is there a fix available for CVE-2022-32775?
At the moment, there is no information available about the availability of a fix for CVE-2022-32775. It is recommended to follow the guidance provided by the vendor and apply any security patches or updates as soon as they are released.

collector/nvd-index
agent/weakness
agent/type
agent/event
agent/references
agent/severity
agent/author
agent/description
agent/tags
agent/last-modified-date
agent/first-publish-date
agent/softwarecombine
collector/mitre-cve
source/MITRE
vendor/goabode
canonical/goabode iota all-in-one security kit firmware
version/goabode iota all-in-one security kit firmware/6.9z
canonical/goabode iota all-in-one security kit
version/goabode iota all-in-one security kit firmware/6.9x

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.