CVE-2022-3183
Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specific function does not sanitize the input provided by the user, which may expose the affected to an OS command injection vulnerability.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - ics-cert@hq.dhs.gov
- Published
- 2022-12-21
- Last modified
- 2025-04-15
- Weaknesses
- CWE-78
Affected products
- Iboot-pdu4-n20 Firmware (Dataprobe)
- Iboot-pdu4a-n15 Firmware (Dataprobe)
- Iboot-pdu4a-n20 Firmware (Dataprobe)
- Iboot-pdu4sa-n15 Firmware (Dataprobe)
- Iboot-pdu4sa-n20 Firmware (Dataprobe)
- Iboot-pdu8a-2n15 Firmware (Dataprobe)
- Iboot-pdu8a-2n20 Firmware (Dataprobe)
- Iboot-pdu8a-n15 Firmware (Dataprobe)
- Iboot-pdu8a-n20 Firmware (Dataprobe)
- Iboot-pdu8sa-2n15 Firmware (Dataprobe)
- Iboot-pdu8sa-n15 Firmware (Dataprobe)
- Iboot-pdu8sa-n20 Firmware (Dataprobe)
- Iboot-pdu Fw (Dataprobe)
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-263-03
