PT-2022-22992 · Abode Systems · Iota All-In-One Security Kit

Matt Wiseman · Published 2022-10-25 · Updated 2022-10-27 · CVE-2022-35881

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Abode Systems, Inc. iota All-In-One Security Kit versions 6.9Z and 6.9X

Description The issue arises from format string injection vulnerabilities in the UPnP logging functionality. A specially-crafted UPnP negotiation can lead to memory corruption, information disclosure, and denial of service. An attacker can host a malicious UPnP service to trigger these vulnerabilities, which occur via errorCode and errorDescription XML tags within the DoUpdateUPnPbyService action handler.

Recommendations For versions 6.9Z and 6.9X, consider disabling the DoUpdateUPnPbyService action handler as a temporary workaround to minimize the risk of exploitation. Restrict access to the UPnP logging functionality to prevent malicious UPnP negotiations. Avoid using the errorCode and errorDescription XML tags in the affected UPnP service until the issue is resolved.

Exploit

Fix

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2022-35881

Affected Products

Iota All-In-One Security Kit

References · 4

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2022-1583 · Exploit
• https://osv.dev/vulnerability/CVE-2022-35881 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-35881 · Security Note
• https://t.me/cibsecurity/52056 · Telegram Post