CVE-2022-29889: Goabode Iota All-In-One Security Kit Firmware

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

A hard-coded password vulnerability exists in the telnet functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z. Use of a hard-coded root password can lead to arbitrary command execution. An attacker can authenticate with hard-coded credentials to trigger this vulnerability.

Affected products

• Goabode Iota All-In-One Security Kit Firmware: version 6.9z only

Published 2022-10-25. Last modified 2026-06-17.