PT-2022-22989 · Abode Systems · Iota All-In-One Security Kit
Matt Wiseman
·
Published
2022-10-25
·
Updated
2022-10-27
·
CVE-2022-35878
CVSS v3.1
8.8
High
| Vector | AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Abode Systems, Inc. iota All-In-One Security Kit versions 6.9Z and 6.9X
Description
The issue arises from format string injection vulnerabilities in the UPnP logging functionality. A specially-crafted UPnP negotiation can lead to memory corruption, information disclosure, and denial of service. An attacker can host a malicious UPnP service to trigger these vulnerabilities, which are caused by format string injection via
ST and Location HTTP response headers in the DoEnumUPnPService action handler.Recommendations
For versions 6.9Z and 6.9X, consider restricting access to the UPnP logging functionality until a patch is available.
As a temporary workaround, avoid using the
DoEnumUPnPService action handler to minimize the risk of exploitation.
Restrict the use of ST and Location HTTP response headers in the UPnP negotiation process to prevent format string injection attacks.Exploit
Fix
Use of Externally-Controlled Format String
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Iota All-In-One Security Kit