Lucene search

[email protected]CVE-2022-47320

HistoryMay 22, 2023 - 11:15 p.m.

CVE-2022-47320

2023-05-2223:15:09

[email protected]

web.nvd.nist.gov

cve-2022-47320

iboot

discovery protocol

device configuration

nvd

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.6%

JSON

The iBoot device’s basic discovery protocol assists in initial device configuration. The discovery protocol shows basic information about devices on the network and allows users to perform configuration changes.

Affected configurations

NVD

Node

dataprobeiboot-pdu4-n20_firmwareRange<1.42.06162022

AND

dataprobeiboot-pdu4-n20Match-

Node

dataprobeiboot-pdu4sa-n15Match-

AND

dataprobeiboot-pdu4sa-n15_firmwareRange<1.42.06162022

Node

dataprobeiboot-pdu4a-n15Match-

AND

dataprobeiboot-pdu4a-n15_firmwareRange<1.42.06162022

Node

dataprobeiboot-pdu4sa-n20Match-

AND

dataprobeiboot-pdu4sa-n20_firmwareRange<1.42.06162022

Node

dataprobeiboot-pdu4a-n20Match-

AND

dataprobeiboot-pdu4a-n20_firmwareRange<1.42.06162022

Node

dataprobeiboot-pdu8sa-n15Match-

AND

dataprobeiboot-pdu8sa-n15_firmwareRange<1.42.06162022

Node

dataprobeiboot-pdu8a-n15Match-

AND

dataprobeiboot-pdu8a-n15_firmwareRange<1.42.06162022

Node

dataprobeiboot-pdu8sa-2n15Match-

AND

dataprobeiboot-pdu8sa-2n15_firmwareRange<1.42.06162022

Node

dataprobeiboot-pdu8a-2n15Match-

AND

dataprobeiboot-pdu8a-2n15_firmwareRange<1.42.06162022

Node

dataprobeiboot-pdu8sa-n20_firmwareRange<1.42.06162022

AND

dataprobeiboot-pdu8sa-n20Match-

Node

dataprobeiboot-pdu8a-n20_firmwareRange<1.42.06162022

AND

dataprobeiboot-pdu8a-n20Match-

Node

dataprobeiboot-pdu8a-2n20_firmwareRange<1.42.06162022

AND

dataprobeiboot-pdu8a-2n20Match-

Node

dataprobeiboot-pdu4-c20_firmwareRange<1.42.06162022

AND

dataprobeiboot-pdu4-c20Match-

Node

dataprobeiboot-pdu4a-c10_firmwareRange<1.42.06162022

AND

dataprobeiboot-pdu4a-c10Match-

Node

dataprobeiboot-pdu4sa-c10_firmwareRange<1.42.06162022

AND

dataprobeiboot-pdu4sa-c10Match-

Node

dataprobeiboot-pdu8a-c10_firmwareRange<1.42.06162022

AND

dataprobeiboot-pdu8a-c10Match-

Node

dataprobeiboot-pdu8sa-c10_firmwareRange<1.42.06162022

AND

dataprobeiboot-pdu8sa-c10Match-

Node

dataprobeiboot-pdu8a-2c20_firmwareRange<1.42.06162022

AND

dataprobeiboot-pdu8a-2c20Match-

Node

dataprobeiboot-pdu4sa-c20_firmwareRange<1.42.06162022

AND

dataprobeiboot-pdu4sa-c20Match-

Node

dataprobeiboot-pdu4a-c20_firmwareRange<1.42.06162022

AND

dataprobeiboot-pdu4a-c20Match-

Node

dataprobeiboot-pdu8a-2c10_firmwareRange<1.42.06162022

AND

dataprobeiboot-pdu8a-2c10Match-

Node

dataprobeiboot-pdu8a-c20_firmwareRange<1.42.06162022

AND

dataprobeiboot-pdu8a-c20Match-

CPENameOperatorVersion
dataprobe:iboot-pdu4-n20_firmwaredataprobe iboot-pdu4-n20 firmwarelt1.42.06162022

CPE	Name	Operator	Version
dataprobe:iboot-pdu4-n20_firmware	dataprobe iboot-pdu4-n20 firmware	lt	1.42.06162022

CNA Affected

[
  {
    "vendor": "Dataprobe, Inc.",
    "product": "Dataprobe iBoot-PDU FW",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.42.06162022",
        "versionType": "custom"
      }
    ]
  }
]

References

dataprobe.com/support/iboot-pdu/local_upgrade_pdu_procedure.pdf

www.cisa.gov/news-events/ics-advisories/icsa-22-263-03

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.6%

JSON

Related for CVE-2022-47320

nvd1 cvelist1 prion1 ics1