Critical Vulnerabilities in Dataprobe iBoot-PDU Power Distribution Units

Dataprobe has released firmware updates to address several critical and high-severity vulnerabilities in iBoot-PDU power distribution units

Threat ID:: CC-4171
Threat Severity:: Information only
Threat Vector:: Vulnerability
Published:: 22 September 2022 12:06 PM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Dataprobe has released firmware updates to address several critical and high-severity vulnerabilities in iBoot-PDU power distribution units

Affected platforms

The following platforms are known to be affected:

Versions: all prior to 1.42.06162022

Dataprobe iBoot-PDU

Threat details

Introduction

Dataprobe has released a firmware security update to address seven vulnerabilities in their iBoot-PDU power distribution unit operating system. The vulnerabilities CVE-2022-3183 and CVE-2022-3184 relate to operating system command injection and path traversal, and both are rated as 9.8 on the CVSSv3 scale.

A remote attacker could exploit some of these vulnerabilities to take control of an affected system.