← CVE Intelligence

CVE-2022-3189

Dataprobe / iBoot-PDU FW PUBLISHED

Description (CNA)

Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specially crafted PHP script could use parameters from a HTTP request to create a URL capable of changing the host parameter. The changed host parameter in the HTTP could point to another host that will send a request to the host or IP specified in the changed host parameter.

Affected (CNA)

Vendor / productVersions
Dataprobe / iBoot-PDU FWaffected 0 through 1.42.06162022

CWE

CWE-918

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.