medium6.5
CVE-2022-4945
The Dataprobe cloud usernames and passwords are stored in plain text in a specific file.
Impact
The Dataprobe cloud usernames and passwords are stored in plain text in a specific file. Any user able to read this specific file from the device could compromise other devices connected to the user's cloud.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dataprobe | Iboot-Pdu4-N20 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu4sa-N15 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu4a-N15 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu4sa-N20 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu4a-N20 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu8sa-N15 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu8a-N15 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu8sa-2n15 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu8a-2n15 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu8sa-N20 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu8a-N20 Firmware | before 1.42.06162022 |
| Dataprobe | Iboot-Pdu8a-2n20 Firmware | before 1.42.06162022 |