CVE:CVE-2022-3187
CNNVD:CNNVD-202209-1621
PHP是一种在服务器端执行的脚本语言。Dataprobe iBoot-PDU是美国Dataprobe公司的一种可通过 Web 访问的受管 PDU 独立控制的插座。
Dataprobe iBoot-PDU FW存在授权问题漏洞，该漏洞源于某些PHP页面只有在与数据库建立有效连接时才会验证。但是，这些PHP页面并不验证用户的有效性。攻击者可以利用这种验证的缺陷来读取出口点的状态。
solution:Upgrade dataprobe iboot-pdu4-n20_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu4sa-n15_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu4a-n15_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu4sa-n20_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu4a-n20_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu8sa-n15_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu8a-n15_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu8sa-2n15_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu8a-2n15_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu8sa-n20_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu8a-n20_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu8a-2n20_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022)