GCVE - cpe:2.3:a:dataprobe:iboot-pdu_fw:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:dataprobe:iboot-pdu_fw:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Dataprobe (`3cc78328-e915-5454-b9a6-61f58725c971`)
Product	Iboot Pdu Fw (`8dfd7361-b92b-5db4-910b-6aa501739771`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-3189`	vulnerable	2026-06-08 05:47:19.653937	Details available MEDIUM (5.3) Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specially crafted PHP script could use parameters from a HTTP request to create a URL capable of changing the host parameter. The changed host parameter in the HTTP could point to another host that will send a request to the host or IP specified in the changed host parameter. Published: 2022-12-21T22:30:58.192Z Updated: 2025-04-15T17:51:42.720Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-22-263-03	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-3188`	vulnerable	2026-06-08 05:47:19.652348	Details available MEDIUM (5.3) Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where unauthenticated users could open PHP index pages without authentication and download the history file from the device; the history file includes the latest actions completed by specific users. Published: 2022-12-21T22:30:19.937Z Updated: 2025-04-15T19:21:30.734Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-22-263-03	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-3187`	vulnerable	2026-06-08 05:47:19.650881	Details available MEDIUM (5.3) Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where certain PHP pages only validate when a valid connection is established with the database. However, these PHP pages do not verify the validity of a user. Attackers could leverage this lack of verification to read the state of outlets. Published: 2022-12-21T22:29:36.679Z Updated: 2025-04-15T19:32:49.187Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-22-263-03	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-3186`	vulnerable	2026-06-08 05:47:19.649581	Details available HIGH (8.6) Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected product allows an attacker to access the device’s main management page from the cloud. This feature enables users to remotely connect devices, however, the current implementation permits users to access other device's information. Published: 2022-12-21T22:28:58.579Z Updated: 2025-04-15T19:34:02.557Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-22-263-03	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-3185`	vulnerable	2026-06-08 05:47:19.647842	Details available MEDIUM (5.3) Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected product exposes sensitive data concerning the device. Published: 2022-12-21T22:28:05.014Z Updated: 2025-04-15T19:34:45.192Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-22-263-03	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-3184`	vulnerable	2026-06-08 05:47:19.645820	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-3183`	vulnerable	2026-06-08 05:47:19.629586	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.