CVE:CVE-2022-3188
CNNVD:CNNVD-202209-1618
Dataprobe iBoot-PDU是美国Dataprobe公司的一种可通过 Web 访问的受管 PDU 独立控制的插座。
Dataprobe iBoot-PDU FW存在安全漏洞，该漏洞源于未经身份验证的用户可以在没有身份验证的情况下打开PHP索引页面，并从设备下载历史文件。历史文件包括特定用户完成的最新操作。
solution:Upgrade dataprobe iboot-pdu4-n20_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu4sa-n15_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu4a-n15_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu4sa-n20_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu4a-n20_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu8sa-n15_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu8a-n15_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu8sa-2n15_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu8a-2n15_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu8sa-n20_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu8a-n20_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu8a-2n20_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022)