Description
Abode iota存在命令注入漏洞，此漏洞是缺乏校验导致的。
Abode iota key 命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1567
https://app.opencve.io/cve/?vendor=goabode&product=iota_all-in-one_security_kit_firmware
https://www.bitdefender.com/en-us/blog/labs/vulnerabilities-identified-in-theabode-iota-security-system-fake-image-injectioninto-timeline
https://nvd.nist.gov/vuln/detail/cve-2022-33206
https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-27804
https://vulnerability.circl.lu/vuln/CVE-2022-33204
https://hisecure.hinet.net/secureinfo/popup.php?cert_id=HiNet-2022-0120
https://avd.aliyun.com/detail?id=AVD-2020-8105
https://www.variotdbs.pl/vuln/VAR-202210-1575/