iBoot-PDU FW vulnerabilities

3 known vulnerabilities in iBoot-PDU FW from Dataprobe. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  iBoot-PDU FW: Improper Access Control

  CVE-2022-3186Dec 21, 2022Dataprobe

  Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected product allows an attacker to access the device’s main management page from the cloud. This feature enables users to remotely connect devices, however, the curren

• 9.8 Critical severity

  iBoot-PDU FW: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-3184Dec 21, 2022DataprobeEPSS 11.6%

  Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the device’s existing firmware allows unauthenticated users to access an old PHP page vulnerable to directory traversal, which may allow a user to write a file to the webroot

• 9.8 Critical severity

  iBoot-PDU FW: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-3183Dec 21, 2022DataprobeEPSS 1.57%

  Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specific function does not sanitize the input provided by the user, which may expose the affected to an OS command injection vulnerability.