Lucene search

[email protected]NVD:CVE-2022-3188

HistoryDec 21, 2022 - 11:15 p.m.

CVE-2022-3188

2022-12-2123:15:09

CWE-306

CWE-863

[email protected]

web.nvd.nist.gov

dataprobe iboot-pdu

firmware vulnerability

unauthenticated access

php index

history file

user actions

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0.001 Low

EPSS

Percentile

32.1%

JSON

Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where unauthenticated users could open PHP index pages without authentication and download the history file from the device; the history file includes the latest actions completed by specific users.

Affected configurations

NVD

Node

dataprobeiboot-pdu4-n20_firmwareRange<1.42.06162022

AND

dataprobeiboot-pdu4-n20Match-

Node

dataprobeiboot-pdu4sa-n15_firmwareRange<1.42.06162022

AND

dataprobeiboot-pdu4sa-n15Match-

Node

dataprobeiboot-pdu4a-n15_firmwareRange<1.42.06162022

AND

dataprobeiboot-pdu4a-n15Match-

Node

dataprobeiboot-pdu4sa-n20_firmwareRange<1.42.06162022

AND

dataprobeiboot-pdu4sa-n20Match-

Node

dataprobeiboot-pdu4a-n20_firmwareRange<1.42.06162022

AND

dataprobeiboot-pdu4a-n20Match-

Node

dataprobeiboot-pdu8sa-n15_firmwareRange<1.42.06162022

AND

dataprobeiboot-pdu8sa-n15Match-

Node

dataprobeiboot-pdu8a-n15_firmwareRange<1.42.06162022

AND

dataprobeiboot-pdu8a-n15Match-

Node

dataprobeiboot-pdu8sa-2n15_firmwareRange<1.42.06162022

AND

dataprobeiboot-pdu8sa-2n15Match-

Node

dataprobeiboot-pdu8a-2n15_firmwareRange<1.42.06162022

AND

dataprobeiboot-pdu8a-2n15Match-

Node

dataprobeiboot-pdu8sa-n20_firmwareRange<1.42.06162022

AND

dataprobeiboot-pdu8sa-n20Match-

Node

dataprobeiboot-pdu8a-n20_firmwareRange<1.42.06162022

AND

dataprobeiboot-pdu8a-n20Match-

Node

dataprobeiboot-pdu8a-2n20_firmwareRange<1.42.06162022

AND

dataprobeiboot-pdu8a-2n20Match-

References

www.cisa.gov/uscert/ics/advisories/icsa-22-263-03

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0.001 Low

EPSS

Percentile

32.1%

JSON

Related for NVD:CVE-2022-3188

prion1 cve1 cvelist1 ics1