CVE:CVE-2022-3183
CNNVD:CNNVD-202209-1633
Dataprobe iBoot-PDU是美国Dataprobe公司的一种可通过 Web 访问的受管 PDU 独立控制的插座。
Dataprobe iBoot-PDU FW存在操作系统命令注入漏洞，该漏洞源于某些特定函数不对用户提供的输入进行消毒，这可能会导致操作系统命令注入。
solution:Upgrade dataprobe iboot-pdu4-n20_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu4sa-n15_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu4a-n15_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu4sa-n20_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu4a-n20_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu8sa-n15_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu8a-n15_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu8sa-2n15_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu8a-2n15_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu8sa-n20_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu8a-n20_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022); Upgrade dataprobe iboot-pdu8a-2n20_firmware to a higher version than 1.42.06162022,and avoid the version (,1.42.06162022)