2 matches found
CVE-2022-3187: Improper Authorization
Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where certain PHP pages only validate when a valid connection is established with the database. However, these PHP pages do not verify the validity of a user. Attackers could leverage this lack of verification to read...
5.3CVSS5.8AI score0.00482EPSS
SaveExploits0References2
PT-2022-20970
Name of the Vulnerable Software and Affected Versions Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 Description The issue allows unauthenticated users to open PHP index pages without authentication and download the history file from the device. The history file includes the latest action...
5.3CVSS0.00551EPSS
SaveExploits0References5
20