Smart Pom Firmware vulnerabilities

2 known vulnerabilities in Smart Pom Firmware from Powertekpdus. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Basic Pdu Firmware: Incorrect Permission Assignment for Critical Resource

  CVE-2022-33175Jun 13, 2022PowertekpdusEPSS 1.74%

  Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 have an insecure permissions setting on the user.token field that is accessible to everyone through the /cgi/get_param.cgi HTTP API. This leads to disclosing active session

• 7.5 High severity

  Basic Pdu Firmware: Incorrect Authorization

  CVE-2022-33174Jun 13, 2022PowertekpdusEPSS 14.1%

  Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 allows remote authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interface (/cgi/get_param.c