VulnerabilityModified
CVE-2022-46738
The affected product exposes multiple sensitive data fields of the affected product.
CRITICAL 9.8EPSS 0.58%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.58%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The affected product exposes multiple sensitive data fields of the affected product. An attacker can use the SNMP command to get device mac address and login as admin.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.58% probability · 46th percentile
- CISA KEV
- Not listed
- Affected
- dataprobe/iboot-pdu4-n20 firmware · dataprobe/iboot-pdu4sa-n15 firmware · dataprobe/iboot-pdu4a-n15 firmware · dataprobe/iboot-pdu4sa-n20 firmware · dataprobe/iboot-pdu4a-n20 firmware · dataprobe/iboot-pdu8sa-n15 firmware · dataprobe/iboot-pdu8a-n15 firmware · dataprobe/iboot-pdu8sa-2n15 firmware · dataprobe/iboot-pdu8a-2n15 firmware · dataprobe/iboot-pdu8sa-n20 firmware · dataprobe/iboot-pdu8a-n20 firmware · dataprobe/iboot-pdu8a-2n20 firmware · dataprobe/iboot-pdu4-c20 firmware · dataprobe/iboot-pdu4a-c10 firmware · dataprobe/iboot-pdu4sa-c10 firmware · dataprobe/iboot-pdu8a-c10 firmware · dataprobe/iboot-pdu8sa-c10 firmware · dataprobe/iboot-pdu8a-2c20 firmware · dataprobe/iboot-pdu4sa-c20 firmware · dataprobe/iboot-pdu4a-c20 firmware · +2 more
- Source
- ics-cert@hq.dhs.gov
References
- https://dataprobe.com/support/iboot-pdu/local_upgrade_pdu_procedure.pdfProduct
- https://www.cisa.gov/news-events/ics-advisories/icsa-22-263-03Patch, Third Party Advisory, US Government Resource
- https://dataprobe.com/support/iboot-pdu/local_upgrade_pdu_procedure.pdfProduct
- https://www.cisa.gov/news-events/ics-advisories/icsa-22-263-03Patch, Third Party Advisory, US Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.