Login Request a demo
Critical severity · published May 22, 2023
CVE-2022-46738
No description published yet
9.8
CVSS
0.6%
EPSS
No
On KEV
Description
The affected product exposes multiple sensitive data fields of the affected product. An attacker can use the SNMP command to get device mac address and login as admin.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 48% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DI
Dataprobe iBoot-PDU FW · Dataprobe, Inc.
before 1.42.06162022 · source: vendor
IF
Iboot-pdu4-c20 Firmware · Dataprobe
before 1.42.06162022 · source: NVD
IF
Iboot-pdu4-n20 Firmware · Dataprobe
before 1.42.06162022 · source: NVD
IF
Iboot-pdu4a-c10 Firmware · Dataprobe
before 1.42.06162022 · source: NVD
IF
Iboot-pdu4a-c20 Firmware · Dataprobe
before 1.42.06162022 · source: NVD
IF
Iboot-pdu4a-n15 Firmware · Dataprobe
before 1.42.06162022 · source: NVD
IF
Iboot-pdu4a-n20 Firmware · Dataprobe
before 1.42.06162022 · source: NVD
IF
Iboot-pdu4sa-c10 Firmware · Dataprobe
before 1.42.06162022 · source: NVD
IF
Iboot-pdu4sa-c20 Firmware · Dataprobe
before 1.42.06162022 · source: NVD
IF
Iboot-pdu4sa-n15 Firmware · Dataprobe
before 1.42.06162022 · source: NVD
IF
Iboot-pdu4sa-n20 Firmware · Dataprobe
before 1.42.06162022 · source: NVD
IF
Iboot-pdu8a-2c10 Firmware · Dataprobe
before 1.42.06162022 · source: NVD
Affected product
DI
Dataprobe iBoot-PDU FW
Dataprobe, Inc.
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-46738
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-46738
Product
https://dataprobe.com/support/iboot-pdu/local_upgrade_pdu_procedure.pdf
Patch
https://www.cisa.gov/news-events/ics-advisories/icsa-22-263-03
More from Dataprobe iBoot-PDU FW
9.8
CVE-2022-46658
No description published yet
8.8
CVE-2022-47311
No description published yet
8.1
CVE-2022-47320
No description published yet
6.5
CVE-2022-4945
No description published yet