CVE Vulnerabilities

CVE-2022-3186

Published: Dec 21, 2022 | Modified: Nov 07, 2023
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected product allows an attacker to access the device’s main management page from the cloud. This feature enables users to remotely connect devices, however, the current implementation permits users to access other devices information.

Affected Software

Name Vendor Start Version End Version
Iboot-pdu4-n20_firmware Dataprobe * 1.42.06162022 (excluding)

References