Description (CNA)
DCIM dcTrack allows an attacker to misuse certain remote access features. An authenticated user with access to the appliance's virtual console could exploit these features to redirect network traffic, potentially accessing restricted services or data on the host machine.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Sunbird / DCIM dcTrack | affected 0 through v9.2.0; unaffected 9.2.3 |
| Sunbird / IQ | affected 0 through v9.2.0; unaffected 9.2.1 |
CWE
CWE-288
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-338-05
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-338-05.json
ADP enrichment
No English description supplied.
No references supplied.