Login Request a demo
High severity · published May 22, 2023
CVE-2022-47320
No description published yet
8.1
CVSS
0.5%
EPSS
No
On KEV
Description
The iBoot device’s basic discovery protocol assists in initial device configuration. The discovery protocol shows basic information about devices on the network and allows users to perform configuration changes.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 43% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DI
Dataprobe iBoot-PDU FW · Dataprobe, Inc.
before 1.42.06162022 · source: vendor
IF
Iboot-pdu4-c20 Firmware · Dataprobe
before 1.42.06162022 · source: NVD
IF
Iboot-pdu4-n20 Firmware · Dataprobe
before 1.42.06162022 · source: NVD
IF
Iboot-pdu4a-c10 Firmware · Dataprobe
before 1.42.06162022 · source: NVD
IF
Iboot-pdu4a-c20 Firmware · Dataprobe
before 1.42.06162022 · source: NVD
IF
Iboot-pdu4a-n15 Firmware · Dataprobe
before 1.42.06162022 · source: NVD
IF
Iboot-pdu4a-n20 Firmware · Dataprobe
before 1.42.06162022 · source: NVD
IF
Iboot-pdu4sa-c10 Firmware · Dataprobe
before 1.42.06162022 · source: NVD
IF
Iboot-pdu4sa-c20 Firmware · Dataprobe
before 1.42.06162022 · source: NVD
IF
Iboot-pdu4sa-n15 Firmware · Dataprobe
before 1.42.06162022 · source: NVD
IF
Iboot-pdu4sa-n20 Firmware · Dataprobe
before 1.42.06162022 · source: NVD
IF
Iboot-pdu8a-2c10 Firmware · Dataprobe
before 1.42.06162022 · source: NVD
Affected product
DI
Dataprobe iBoot-PDU FW
Dataprobe, Inc.
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-47320
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-47320
Product
https://dataprobe.com/support/iboot-pdu/local_upgrade_pdu_procedure.pdf
Patch
https://www.cisa.gov/news-events/ics-advisories/icsa-22-263-03
More from Dataprobe iBoot-PDU FW
9.8
CVE-2022-46658
No description published yet
9.8
CVE-2022-46738
No description published yet
8.8
CVE-2022-47311
No description published yet
6.5
CVE-2022-4945
No description published yet