Vulnerability CVE-2022-3188


Published: 2022-12-21   Modified: 2022-12-22

Description:
Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where unauthenticated users could open PHP index pages without authentication and download the history file from the device; the history file includes the latest actions completed by specific users.

Type:

CWE-863

(Incorrect Authorization)

 References:
https://www.cisa.gov/uscert/ics/advisories/icsa-22-263-03

Copyright 2026, cxsecurity.com

 

Back to Top