critical9.8
CVE-2022-3183
Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specific function does not sanitize the input provided by the user, whic…
Impact
Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specific function does not sanitize the input provided by the user, which may expose the affected to an OS command injection vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dataprobe | Iboot-Pdu4-N20 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu4sa-N15 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu4a-N15 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu4sa-N20 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu4a-N20 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu8sa-N15 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu8a-N15 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu8sa-2n15 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu8a-2n15 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu8sa-N20 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu8a-N20 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu8a-2n20 Firmware | before 1.42.06162022 |