title: CVE-2022-47320
description: The iBoot device’s basic discovery protocol assists in initial device configuration. The discovery protocol shows basic information about devices on the network and allows users to perform configuration changes.
problem types: CWE-288 Authentication Bypass Using an Alternate Path or Channel
affected:
{
vendor: Dataprobe, Inc.
product: Dataprobe iBoot-PDU FW
versions:
status: affected, version: 0, lessThan: 1.42.06162022, versionType: custom
}
metrics:
format: CVSS
scenarios: GENERAL
cvssV3_1: [
version: 3.1
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
baseScore: 8.1
baseSeverity: HIGH
]