Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveIcscertCVE-2022-3188
HistoryDec 21, 2022 - 11:15 p.m.

CVE-2022-3188

2022-12-2123:15:09
CWE-306
CWE-863
icscert
web.nvd.nist.gov
36
dataprobe
iboot-pdu
vulnerability
unauthenticated access
php
history file
security

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

31.9%

JSON

Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where unauthenticated users could open PHP index pages without authentication and download the history file from the device; the history file includes the latest actions completed by specific users.

Affected configurations

Nvd
Node
dataprobeiboot-pdu4-n20_firmwareRange<1.42.06162022
AND
dataprobeiboot-pdu4-n20Match-
Node
dataprobeiboot-pdu4sa-n15_firmwareRange<1.42.06162022
AND
dataprobeiboot-pdu4sa-n15Match-
Node
dataprobeiboot-pdu4a-n15_firmwareRange<1.42.06162022
AND
dataprobeiboot-pdu4a-n15Match-
Node
dataprobeiboot-pdu4sa-n20_firmwareRange<1.42.06162022
AND
dataprobeiboot-pdu4sa-n20Match-
Node
dataprobeiboot-pdu4a-n20_firmwareRange<1.42.06162022
AND
dataprobeiboot-pdu4a-n20Match-
Node
dataprobeiboot-pdu8sa-n15_firmwareRange<1.42.06162022
AND
dataprobeiboot-pdu8sa-n15Match-
Node
dataprobeiboot-pdu8a-n15_firmwareRange<1.42.06162022
AND
dataprobeiboot-pdu8a-n15Match-
Node
dataprobeiboot-pdu8sa-2n15_firmwareRange<1.42.06162022
AND
dataprobeiboot-pdu8sa-2n15Match-
Node
dataprobeiboot-pdu8a-2n15_firmwareRange<1.42.06162022
AND
dataprobeiboot-pdu8a-2n15Match-
Node
dataprobeiboot-pdu8sa-n20_firmwareRange<1.42.06162022
AND
dataprobeiboot-pdu8sa-n20Match-
Node
dataprobeiboot-pdu8a-n20_firmwareRange<1.42.06162022
AND
dataprobeiboot-pdu8a-n20Match-
Node
dataprobeiboot-pdu8a-2n20_firmwareRange<1.42.06162022
AND
dataprobeiboot-pdu8a-2n20Match-
VendorProductVersionCPE
dataprobeiboot-pdu4-n20_firmware*cpe:2.3:o:dataprobe:iboot-pdu4-n20_firmware:*:*:*:*:*:*:*:*
dataprobeiboot-pdu4-n20-cpe:2.3:h:dataprobe:iboot-pdu4-n20:-:*:*:*:*:*:*:*
dataprobeiboot-pdu4sa-n15_firmware*cpe:2.3:o:dataprobe:iboot-pdu4sa-n15_firmware:*:*:*:*:*:*:*:*
dataprobeiboot-pdu4sa-n15-cpe:2.3:h:dataprobe:iboot-pdu4sa-n15:-:*:*:*:*:*:*:*
dataprobeiboot-pdu4a-n15_firmware*cpe:2.3:o:dataprobe:iboot-pdu4a-n15_firmware:*:*:*:*:*:*:*:*
dataprobeiboot-pdu4a-n15-cpe:2.3:h:dataprobe:iboot-pdu4a-n15:-:*:*:*:*:*:*:*
dataprobeiboot-pdu4sa-n20_firmware*cpe:2.3:o:dataprobe:iboot-pdu4sa-n20_firmware:*:*:*:*:*:*:*:*
dataprobeiboot-pdu4sa-n20-cpe:2.3:h:dataprobe:iboot-pdu4sa-n20:-:*:*:*:*:*:*:*
dataprobeiboot-pdu4a-n20_firmware*cpe:2.3:o:dataprobe:iboot-pdu4a-n20_firmware:*:*:*:*:*:*:*:*
dataprobeiboot-pdu4a-n20-cpe:2.3:h:dataprobe:iboot-pdu4a-n20:-:*:*:*:*:*:*:*
Rows per page:
1-10 of 241

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "iBoot-PDU FW",
    "vendor": "Dataprobe",
    "versions": [
      {
        "lessThanOrEqual": "1.42.06162022",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Related

prion 1
nvd 1
cvelist 1
ics 1
prion
prion
Authentication flaw
2022-12-21 23:15:00
nvd
nvd
CVE-2022-3188
2022-12-21 23:15:09
cvelist
cvelist
CVE-2022-3188
2022-12-21 22:30:19
ics
ics
Dataprobe iBoot-PDU (Update A)
2023-05-04 12:00:00

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

31.9%

JSON
Related for CVE-2022-3188
prion1nvd1cvelist1ics1