CRITICAL🇵🇱 Wersja polska

CVE-2022-3183

CVSS 9.8v3.1pub. 2022-12-21upd. 2024-11-21

Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specific function does not sanitize the input provided by the user, which may expose the affected to an OS command injection vulnerability.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Dataprobe Iboot Pdu4a N15

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu4a N15 Firmware

    OS
    Dataprobe
    < 1.42.06162022

  • Dataprobe Iboot Pdu4a N20

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu4a N20 Firmware

    OS
    Dataprobe
    < 1.42.06162022

  • Dataprobe Iboot Pdu4 N20

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu4 N20 Firmware

    OS
    Dataprobe
    < 1.42.06162022

  • Dataprobe Iboot Pdu4sa N15

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu4sa N15 Firmware

    OS
    Dataprobe
    < 1.42.06162022

  • Dataprobe Iboot Pdu4sa N20

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu4sa N20 Firmware

    OS
    Dataprobe
    < 1.42.06162022

  • Dataprobe Iboot Pdu8a 2n15

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu8a 2n15 Firmware

    OS
    Dataprobe
    < 1.42.06162022

  • Dataprobe Iboot Pdu8a 2n20

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu8a 2n20 Firmware

    OS
    Dataprobe
    < 1.42.06162022

  • Dataprobe Iboot Pdu8a N15

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu8a N15 Firmware

    OS
    Dataprobe
    < 1.42.06162022

  • Dataprobe Iboot Pdu8a N20

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu8a N20 Firmware

    OS
    Dataprobe
    < 1.42.06162022

  • Dataprobe Iboot Pdu8sa 2n15

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu8sa 2n15 Firmware

    OS
    Dataprobe
    < 1.42.06162022

  • Dataprobe Iboot Pdu8sa N15

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu8sa N15 Firmware

    OS
    Dataprobe
    < 1.42.06162022

  • Dataprobe Iboot Pdu8sa N20

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu8sa N20 Firmware

    OS
    Dataprobe
    < 1.42.06162022
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Command Injection
CWE
References

Related vulnerabilities

CVE-2023-3259CRITICAL9.8PL ✓same product

Authentication bypass przez manipulację cookie w Dataprobe iBoot PDU

CVE-2022-3184CRITICAL9.8PL ✓same product

Path traversal w Dataprobe iBoot-PDU umożliwiający zapis pliku do webroot

CVE-2023-3261HIGH7.5same product

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerabi...

CVE-2023-3260HIGH7.2same product

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection v...

CVE-2023-3263HIGH7.5same product

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypa...