CVE-2022-32586

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

An OS command injection vulnerability exists in the web interface /action/ipcamRecordPost functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published
Oct 25, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-325874.3Cross-Site Request Forgery (CSRF) vulnerability in CodeAndMore WP Page Widget plugin <= 3.9 on WordPress leading to plugin settings change.CVE-2022-325887.8An out-of-bounds write vulnerability exists in the PICT parsing pctwread_14841 functionality of Accusoft ImageGear 20.0. A specially-craftedCVE-2022-325897.5In Wi-Fi driver, there is a possible way to disconnect Wi-Fi due to an improper resource release. This could lead to remote denial of servicCVE-2022-32597.4Openshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the-middle (MITM) attacks.CVE-2022-325906.7In wlan, there is a possible use after free due to an incorrect status check. This could lead to local escalation of privilege with System eCVE-2022-325917.5In ril, there is a possible system crash due to an incorrect bounds check. This could lead to remote denial of service with no additional exCVE-2022-325926.7In cpu dvfs, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SyCVE-2022-325936.7In vowe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SystemCVE-2022-325946.7In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege withCVE-2022-325954.4In widevine, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with SCVE-2022-325966.7In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege withCVE-2022-325976.7In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with
CVE-2022-32586: High severity, CVSS 8.8 | Vulnix