CVE-2022-29889 - A hard-coded password vulnerability exists in the telnet functionality of Abode Systems, Inc

Back Back to CVE browser

CRITICAL

A hard-coded password vulnerability exists in the telnet functionality of Abode Systems, Inc

Published Oct 25, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 1.23%

Description

A hard-coded password vulnerability exists in the telnet functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z. Use of a hard-coded root password can lead to arbitrary command execution. An attacker can authenticate with hard-coded credentials to trigger this vulnerability.

Affected products

Vendor Abode Systems, Inc. Product iota All-In-One Security Kit Default
unknown
Affected
- 6.9Z

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Abode Systems, Inc.	iota All-In-One Security Kit	unknown	Affected 6.9Z

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-798

Hard-coded Credentials

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-34200
Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1569
ExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-34200		Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1569		ExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner talos

Published Oct 25, 2022

Updated Apr 15, 2025

Reserved Jun 13, 2022

Link CVE-2022-29889

CISA Vulnrichment

Updated Apr 15, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-29889

Red Hat

No data

ENISA EUVD

Assigner talos

Published Oct 25, 2022

Updated Apr 15, 2025

Link EUVD-2022-34200

GitHub

No data