Vulnerability · Published May 22, 2023 · Assigned by icscert
CVE-2022-47311CVE-2022-47311
High 8.5
In plain English
A high-severity security flaw in Dataprobe iBoot-PDU FW from Dataprobe, Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).
Severity (CVSS 3.1)8.5High
Exploit odds (30 days)0.5%top 55.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A proprietary protocol for iBoot devices is used for control and keepalive commands. The function compares the username and password; it also contains the configuration data for the user specified. If the user does not exist, then it sends a value for username and password, which allows successful authentication for a connection.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Dataprobe, Inc. | Dataprobe iBoot-PDU FW | 0 – before 1.42.06162022 |