CVE-2022-3188
Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where unauthenticated users could open PHP index pages without authentication and download the history file from the device; the history file includes the latest actions completed by specific users.
- Score
- CVSS 3.1 5.3 Medium
- Status
- Modified - ics-cert@hq.dhs.gov
- Published
- 2022-12-21
- Last modified
- 2025-04-15
- Weaknesses
- CWE-306, CWE-863
Affected products
- Iboot-pdu4-n20 Firmware (Dataprobe)
- Iboot-pdu4a-n15 Firmware (Dataprobe)
- Iboot-pdu4a-n20 Firmware (Dataprobe)
- Iboot-pdu4sa-n15 Firmware (Dataprobe)
- Iboot-pdu4sa-n20 Firmware (Dataprobe)
- Iboot-pdu8a-2n15 Firmware (Dataprobe)
- Iboot-pdu8a-2n20 Firmware (Dataprobe)
- Iboot-pdu8a-n15 Firmware (Dataprobe)
- Iboot-pdu8a-n20 Firmware (Dataprobe)
- Iboot-pdu8sa-2n15 Firmware (Dataprobe)
- Iboot-pdu8sa-n15 Firmware (Dataprobe)
- Iboot-pdu8sa-n20 Firmware (Dataprobe)
- Iboot-pdu Fw (Dataprobe)
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-263-03
