ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2022-47311

—
CVSS 3.1
8.8 high
EPSS
<1%p42
Published
()
Modified
Description

A proprietary protocol for iBoot devices is used for control and keepalive commands. The function compares the username and password; it also contains the configuration data for the user specified. If the user does not exist, then it sends a value for username and password, which allows successful authentication for a connection.

Vendors
dataprobe
Products
iboot-pdu4-n20 firmware, iboot-pdu4sa-n15 firmware, iboot-pdu4a-n15 firmware, iboot-pdu4sa-n20 firmware, iboot-pdu4a-n20 firmware, iboot-pdu8sa-n15 firmware, iboot-pdu8a-n15 firmware, iboot-pdu8sa-2n15 firmware, iboot-pdu8a-2n15 firmware, iboot-pdu8sa-n20 firmware, iboot-pdu8a-n20 firmware, iboot-pdu8a-2n20 firmware
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news

No ingested article mentions this CVE yet.