← CVE Intelligence

CVE-2022-3187

Dataprobe / iBoot-PDU FW PUBLISHED

Description (CNA)

Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where certain PHP pages only validate when a valid connection is established with the database. However, these PHP pages do not verify the validity of a user. Attackers could leverage this lack of verification to read the state of outlets.

Affected (CNA)

Vendor / productVersions
Dataprobe / iBoot-PDU FWaffected 0 through 1.42.06162022

CWE

CWE-285

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.