5.3
CVE-2022-3185
- EPSS 0.16%
- Veröffentlicht 21.12.2022 23:15:09
- Zuletzt bearbeitet 21.11.2024 07:18:59
- Quelle ics-cert@hq.dhs.gov
- CVE-Watchlists
- Unerledigt
LoginDataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected product exposes sensitive data concerning the device.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dataprobe ≫ Iboot-pdu4-n20 Firmware Version < 1.42.06162022
Dataprobe ≫ Iboot-pdu4sa-n15 Firmware Version < 1.42.06162022
Dataprobe ≫ Iboot-pdu4a-n15 Firmware Version < 1.42.06162022
Dataprobe ≫ Iboot-pdu4sa-n20 Firmware Version < 1.42.06162022
Dataprobe ≫ Iboot-pdu4a-n20 Firmware Version < 1.42.06162022
Dataprobe ≫ Iboot-pdu8sa-n15 Firmware Version < 1.42.06162022
Dataprobe ≫ Iboot-pdu8a-n15 Firmware Version < 1.42.06162022
Dataprobe ≫ Iboot-pdu8sa-2n15 Firmware Version < 1.42.06162022
Dataprobe ≫ Iboot-pdu8a-2n15 Firmware Version < 1.42.06162022
Dataprobe ≫ Iboot-pdu8sa-n20 Firmware Version < 1.42.06162022
Dataprobe ≫ Iboot-pdu8a-n20 Firmware Version < 1.42.06162022
Dataprobe ≫ Iboot-pdu8a-2n20 Firmware Version < 1.42.06162022
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.16% | 0.369 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.3 | 3.9 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
| ics-cert@hq.dhs.gov | 5.3 | 3.9 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.