critical9.8
CVE-2022-3184
Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the device’s existing firmware allows unauthenticated users to access an o…
Impact
Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the device’s existing firmware allows unauthenticated users to access an old PHP page vulnerable to directory traversal, which may allow a user to write a file to the webroot directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dataprobe | Iboot-Pdu4-N20 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu4sa-N15 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu4a-N15 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu4sa-N20 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu4a-N20 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu8sa-N15 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu8a-N15 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu8sa-2n15 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu8a-2n15 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu8sa-N20 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu8a-N20 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu8a-2n20 Firmware | before 1.42.06162022 |