8.8

CVE-2022-47311

EPSS 0.11%
Veröffentlicht 22.05.2023 23:15:09
Zuletzt bearbeitet 21.11.2024 07:31:42
Quelle ics-cert@hq.dhs.gov
CVE-Watchlists
Login
Unerledigt
Login

A proprietary protocol for iBoot devices is used for control and keepalive commands. The function compares the username and password; it also contains the configuration data for the user specified. If the user does not exist, then it sends a value for username and password, which allows successful authentication for a connection.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Dataprobe ≫ Iboot-pdu4-n20 Firmware Version < 1.42.06162022

Dataprobe ≫ Iboot-pdu4-n20 Version-

Dataprobe ≫ Iboot-pdu4sa-n15 Firmware Version < 1.42.06162022

Dataprobe ≫ Iboot-pdu4sa-n15 Version-

Dataprobe ≫ Iboot-pdu4a-n15 Firmware Version < 1.42.06162022

Dataprobe ≫ Iboot-pdu4a-n15 Version-

Dataprobe ≫ Iboot-pdu4sa-n20 Firmware Version < 1.42.06162022

Dataprobe ≫ Iboot-pdu4sa-n20 Version-

Dataprobe ≫ Iboot-pdu4a-n20 Firmware Version < 1.42.06162022

Dataprobe ≫ Iboot-pdu4a-n20 Version-

Dataprobe ≫ Iboot-pdu8sa-n15 Firmware Version < 1.42.06162022

Dataprobe ≫ Iboot-pdu8sa-n15 Version-

Dataprobe ≫ Iboot-pdu8a-n15 Firmware Version < 1.42.06162022

Dataprobe ≫ Iboot-pdu8a-n15 Version-

Dataprobe ≫ Iboot-pdu8sa-2n15 Firmware Version < 1.42.06162022

Dataprobe ≫ Iboot-pdu8sa-2n15 Version-

Dataprobe ≫ Iboot-pdu8a-2n15 Firmware Version < 1.42.06162022

Dataprobe ≫ Iboot-pdu8a-2n15 Version-

Dataprobe ≫ Iboot-pdu8sa-n20 Firmware Version < 1.42.06162022

Dataprobe ≫ Iboot-pdu8sa-n20 Version-

Dataprobe ≫ Iboot-pdu8a-n20 Firmware Version < 1.42.06162022

Dataprobe ≫ Iboot-pdu8a-n20 Version-

Dataprobe ≫ Iboot-pdu8a-2n20 Firmware Version < 1.42.06162022

Dataprobe ≫ Iboot-pdu8a-2n20 Version-

Dataprobe ≫ Iboot-pdu4-c20 Firmware Version < 1.42.06162022

Dataprobe ≫ Iboot-pdu4-c20 Version-

Dataprobe ≫ Iboot-pdu4a-c10 Firmware Version < 1.42.06162022

Dataprobe ≫ Iboot-pdu4a-c10 Version-

Dataprobe ≫ Iboot-pdu4sa-c10 Firmware Version < 1.42.06162022

Dataprobe ≫ Iboot-pdu4sa-c10 Version-

Dataprobe ≫ Iboot-pdu8a-c10 Firmware Version < 1.42.06162022

Dataprobe ≫ Iboot-pdu8a-c10 Version-

Dataprobe ≫ Iboot-pdu8sa-c10 Firmware Version < 1.42.06162022

Dataprobe ≫ Iboot-pdu8sa-c10 Version-

Dataprobe ≫ Iboot-pdu8a-2c20 Firmware Version < 1.42.06162022

Dataprobe ≫ Iboot-pdu8a-2c20 Version-

Dataprobe ≫ Iboot-pdu4sa-c20 Firmware Version < 1.42.06162022

Dataprobe ≫ Iboot-pdu4sa-c20 Version-

Dataprobe ≫ Iboot-pdu4a-c20 Firmware Version < 1.42.06162022

Dataprobe ≫ Iboot-pdu4a-c20 Version-

Dataprobe ≫ Iboot-pdu8a-2c10 Firmware Version < 1.42.06162022

Dataprobe ≫ Iboot-pdu8a-2c10 Version-

Dataprobe ≫ Iboot-pdu8a-c20 Firmware Version < 1.42.06162022

Dataprobe ≫ Iboot-pdu8a-c20 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.11%	0.289

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
ics-cert@hq.dhs.gov	8.5	3.1	4.7	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

https://dataprobe.com/support/iboot-pdu/local_upgrade_pdu_procedure.pdf

Product

https://www.cisa.gov/news-events/ics-advisories/icsa-22-263-03

Patch

Third Party Advisory

US Government Resource

https://nvd.nist.gov/vuln/detail/CVE-2022-47311

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-47311

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-47311

EUVD