Lucene search

IcscertCVELIST:CVE-2022-47320

HistoryMay 22, 2023 - 10:30 p.m.

CVE-2022-47320 CVE-2022-47320

2023-05-2222:30:59

icscert

www.cve.org

iboot device

discovery protocol

initial configuration

network devices

configuration changes

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

8.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.6%

JSON

The iBoot device’s basic discovery protocol assists in initial device configuration. The discovery protocol shows basic information about devices on the network and allows users to perform configuration changes.

CNA Affected

[
  {
    "vendor": "Dataprobe, Inc.",
    "product": "Dataprobe iBoot-PDU FW",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.42.06162022",
        "versionType": "custom"
      }
    ]
  }
]

References

dataprobe.com/support/iboot-pdu/local_upgrade_pdu_procedure.pdf

www.cisa.gov/news-events/ics-advisories/icsa-22-263-03

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

8.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.6%

JSON

Related for CVELIST:CVE-2022-47320