5.3
CVE-2022-3188
- EPSS 0.16%
- Veröffentlicht 21.12.2022 23:15:09
- Zuletzt bearbeitet 21.11.2024 07:19:00
- Quelle ics-cert@hq.dhs.gov
- CVE-Watchlists
- Unerledigt
LoginDataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where unauthenticated users could open PHP index pages without authentication and download the history file from the device; the history file includes the latest actions completed by specific users.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dataprobe ≫ Iboot-pdu4-n20 Firmware Version < 1.42.06162022
Dataprobe ≫ Iboot-pdu4sa-n15 Firmware Version < 1.42.06162022
Dataprobe ≫ Iboot-pdu4a-n15 Firmware Version < 1.42.06162022
Dataprobe ≫ Iboot-pdu4sa-n20 Firmware Version < 1.42.06162022
Dataprobe ≫ Iboot-pdu4a-n20 Firmware Version < 1.42.06162022
Dataprobe ≫ Iboot-pdu8sa-n15 Firmware Version < 1.42.06162022
Dataprobe ≫ Iboot-pdu8a-n15 Firmware Version < 1.42.06162022
Dataprobe ≫ Iboot-pdu8sa-2n15 Firmware Version < 1.42.06162022
Dataprobe ≫ Iboot-pdu8a-2n15 Firmware Version < 1.42.06162022
Dataprobe ≫ Iboot-pdu8sa-n20 Firmware Version < 1.42.06162022
Dataprobe ≫ Iboot-pdu8a-n20 Firmware Version < 1.42.06162022
Dataprobe ≫ Iboot-pdu8a-2n20 Firmware Version < 1.42.06162022
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.16% | 0.368 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.3 | 3.9 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
| ics-cert@hq.dhs.gov | 5.3 | 3.9 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
CWE-306 Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
CWE-863 Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.