Description (CNA)
DCIM dcTrack platforms utilize default and hard-coded credentials for access. An attacker could use these credentials to administer the database, escalate privileges on the platform or execute system commands on the host.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Sunbird / DCIM dcTrack | affected 0 through v9.2.0; unaffected 9.2.3 |
| Sunbird / Power IQ | affected 0 through v9.2.0; unaffected 9.2.1 |
CWE
CWE-798
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-338-05
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-338-05.json
ADP enrichment
No English description supplied.
No references supplied.