high8.5
CVE-2022-47311
A proprietary protocol for iBoot devices is used for control and keepalive commands.
Impact
A proprietary protocol for iBoot devices is used for control and keepalive commands. The function compares the username and password; it also contains the configuration data for the user specified. If the user does not exist, then it sends a value for username and password, which allows successful authentication for a connection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dataprobe | Iboot-Pdu4-N20 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu4sa-N15 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu4a-N15 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu4sa-N20 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu4a-N20 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu8sa-N15 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu8a-N15 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu8sa-2n15 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu8a-2n15 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu8sa-N20 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu8a-N20 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu8a-2n20 Firmware | before 1.42.06162022 |