logo
Vulnerability feed
CONTRIBUTE

Vulnerability

warn

CVE-2022-35881

Reference to the description:

https://nvd.nist.gov/vuln/detail/CVE-2022-35881

Description:
Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted UPnP negotiation can lead to memory corruption, information disclosure, and denial of service. An attacker can host a malicious UPnP service to trigger these vulnerabilities.This vulnerability arises from format string injection via `errorCode` and `errorDescription` XML tags, as used within the `DoUpdateUPnPbyService` action handler.
Last updated date:
10/27/2022
Type:
exploit
Confidence:
HIGH
Date of publishing:
10/27/2022
Reference url to background

https://talosintelligence.com/vulnerability_reports/TALOS-2022-1583

Vulnerability FeedContributorsAboutBlog

@inTheWild

©2024

Privacy Policy