CVE-2022-3186

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-3186
Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected product allows an attacker to access the device’s main management page from the cloud. This feature enables users to remotely connect devices, however, the current implementation permits users to access other device's information.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.cisa.gov/uscert/ics/advisories/icsa-22-263-03 Patch Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dataprobe:iboot-pdu4-n20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dataprobe:iboot-pdu4-n20:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:dataprobe:iboot-pdu4sa-n15_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dataprobe:iboot-pdu4sa-n15:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:dataprobe:iboot-pdu4a-n15_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dataprobe:iboot-pdu4a-n15:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:dataprobe:iboot-pdu4sa-n20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dataprobe:iboot-pdu4sa-n20:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:dataprobe:iboot-pdu4a-n20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dataprobe:iboot-pdu4a-n20:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:dataprobe:iboot-pdu8sa-n15_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dataprobe:iboot-pdu8sa-n15:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:dataprobe:iboot-pdu8a-n15_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dataprobe:iboot-pdu8a-n15:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:dataprobe:iboot-pdu8sa-2n15_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dataprobe:iboot-pdu8sa-2n15:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:dataprobe:iboot-pdu8a-2n15_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dataprobe:iboot-pdu8a-2n15:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:dataprobe:iboot-pdu8sa-n20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dataprobe:iboot-pdu8sa-n20:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:dataprobe:iboot-pdu8a-n20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dataprobe:iboot-pdu8a-n20:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:dataprobe:iboot-pdu8a-2n20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dataprobe:iboot-pdu8a-2n20:-:*:*:*:*:*:*:*
History

07 Nov 2023, 03:50

Type Values Removed Values Added
Summary Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected product allows an attacker to access the device’s main management page from the cloud. This feature enables users to remotely connect devices, however, the current implementation permits users to access other device's information. Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected product allows an attacker to access the device’s main management page from the cloud. This feature enables users to remotely connect devices, however, the current implementation permits users to access other device's information.

21 Jul 2023, 19:25

Type Values Removed Values Added
CWE CWE-284 NVD-CWE-Other

28 Dec 2022, 18:59

Type Values Removed Values Added
CPE cpe:2.3:o:dataprobe:iboot-pdu8sa-n20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dataprobe:iboot-pdu8a-2n15:-:*:*:*:*:*:*:*
cpe:2.3:o:dataprobe:iboot-pdu4a-n15_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dataprobe:iboot-pdu8sa-n15_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dataprobe:iboot-pdu8a-n15_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dataprobe:iboot-pdu8sa-2n15_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dataprobe:iboot-pdu4-n20:-:*:*:*:*:*:*:*
cpe:2.3:h:dataprobe:iboot-pdu4a-n20:-:*:*:*:*:*:*:*
cpe:2.3:h:dataprobe:iboot-pdu8a-2n20:-:*:*:*:*:*:*:*
cpe:2.3:o:dataprobe:iboot-pdu8a-2n20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dataprobe:iboot-pdu8sa-n15:-:*:*:*:*:*:*:*
cpe:2.3:h:dataprobe:iboot-pdu8sa-2n15:-:*:*:*:*:*:*:*
cpe:2.3:h:dataprobe:iboot-pdu4sa-n20:-:*:*:*:*:*:*:*
cpe:2.3:o:dataprobe:iboot-pdu4a-n20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dataprobe:iboot-pdu4a-n15:-:*:*:*:*:*:*:*
cpe:2.3:h:dataprobe:iboot-pdu4sa-n15:-:*:*:*:*:*:*:*
cpe:2.3:h:dataprobe:iboot-pdu8a-n15:-:*:*:*:*:*:*:*
cpe:2.3:h:dataprobe:iboot-pdu8a-n20:-:*:*:*:*:*:*:*
cpe:2.3:o:dataprobe:iboot-pdu8a-2n15_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dataprobe:iboot-pdu4sa-n15_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dataprobe:iboot-pdu4-n20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:dataprobe:iboot-pdu4sa-n20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dataprobe:iboot-pdu8sa-n20:-:*:*:*:*:*:*:*
cpe:2.3:o:dataprobe:iboot-pdu8a-n20_firmware:*:*:*:*:*:*:*:*
First Time Dataprobe iboot-pdu8sa-n15
Dataprobe iboot-pdu8sa-2n15
Dataprobe
Dataprobe iboot-pdu8a-2n20 Firmware
Dataprobe iboot-pdu8a-n20 Firmware
Dataprobe iboot-pdu4-n20 Firmware
Dataprobe iboot-pdu4sa-n20 Firmware
Dataprobe iboot-pdu4a-n15 Firmware
Dataprobe iboot-pdu8a-n15 Firmware
Dataprobe iboot-pdu8a-2n15
Dataprobe iboot-pdu4sa-n15 Firmware
Dataprobe iboot-pdu8a-2n15 Firmware
Dataprobe iboot-pdu8a-2n20
Dataprobe iboot-pdu4a-n15
Dataprobe iboot-pdu4sa-n20
Dataprobe iboot-pdu8a-n15
Dataprobe iboot-pdu4-n20
Dataprobe iboot-pdu4a-n20
Dataprobe iboot-pdu4sa-n15
Dataprobe iboot-pdu8sa-n20 Firmware
Dataprobe iboot-pdu8sa-n15 Firmware
Dataprobe iboot-pdu4a-n20 Firmware
Dataprobe iboot-pdu8a-n20
Dataprobe iboot-pdu8sa-n20
Dataprobe iboot-pdu8sa-2n15 Firmware
References (MISC) https://www.cisa.gov/uscert/ics/advisories/icsa-22-263-03 - (MISC) https://www.cisa.gov/uscert/ics/advisories/icsa-22-263-03 - Patch, Third Party Advisory, US Government Resource
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5

21 Dec 2022, 23:15

Type Values Removed Values Added
New CVE
Information

Published : 2022-12-21 23:15

Updated : 2023-12-10 14:48

NVD link : CVE-2022-3186

Mitre link : CVE-2022-3186

CVE.ORG link : CVE-2022-3186

JSON object : View

Products Affected

dataprobe

  • iboot-pdu4sa-n15
  • iboot-pdu8a-2n15
  • iboot-pdu4-n20_firmware
  • iboot-pdu4a-n15_firmware
  • iboot-pdu8a-n20_firmware
  • iboot-pdu8a-2n15_firmware
  • iboot-pdu8a-2n20
  • iboot-pdu8sa-2n15_firmware
  • iboot-pdu8a-n15
  • iboot-pdu4a-n20
  • iboot-pdu4sa-n20
  • iboot-pdu4sa-n15_firmware
  • iboot-pdu4a-n20_firmware
  • iboot-pdu8sa-n20
  • iboot-pdu8a-n15_firmware
  • iboot-pdu4-n20
  • iboot-pdu8sa-n20_firmware
  • iboot-pdu8a-n20
  • iboot-pdu8a-2n20_firmware
  • iboot-pdu8sa-n15_firmware
  • iboot-pdu8sa-2n15
  • iboot-pdu4sa-n20_firmware
  • iboot-pdu4a-n15
  • iboot-pdu8sa-n15
CWE
NVD-CWE-Other CWE-284

Improper Access Control