NetSight
critical9.8

CVE-2022-3183

Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specific function does not sanitize the input provided by the user, whic…

Impact

Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specific function does not sanitize the input provided by the user, which may expose the affected to an OS command injection vulnerability.

Affected products

VendorProductAffected versions
DataprobeIboot-Pdu4-N20 Firmware
before 1.42.06162022
DataprobeIboot-Pdu4sa-N15 Firmware
before 1.42.06162022
DataprobeIboot-Pdu4a-N15 Firmware
before 1.42.06162022
DataprobeIboot-Pdu4sa-N20 Firmware
before 1.42.06162022
DataprobeIboot-Pdu4a-N20 Firmware
before 1.42.06162022
DataprobeIboot-Pdu8sa-N15 Firmware
before 1.42.06162022
DataprobeIboot-Pdu8a-N15 Firmware
before 1.42.06162022
DataprobeIboot-Pdu8sa-2n15 Firmware
before 1.42.06162022
DataprobeIboot-Pdu8a-2n15 Firmware
before 1.42.06162022
DataprobeIboot-Pdu8sa-N20 Firmware
before 1.42.06162022
DataprobeIboot-Pdu8a-N20 Firmware
before 1.42.06162022
DataprobeIboot-Pdu8a-2n20 Firmware
before 1.42.06162022

Weakness classification

References