Skip to content
OpenAdvisories
Medium ICSA-25-338-05 2 CVEs

Sunbird DCIM dcTrack and Power IQ

Published Dec 4, 2025 · Updated Dec 4, 2025

Vendor: Sunbird Product: DCIM dcTrack Product: Power IQ

Summary

Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access or steal credentials.

Vulnerabilities 2

  • High 7.2
    CVE-2025-66238

    Sunbird DCIM dcTrack and Power IQ Authentication Bypass Using an Alternate Path or Channel

    DCIM dcTrack allows an attacker to misuse certain remote access features. An authenticated user with access to the appliance's virtual console could exploit these features to redirect network traffic, potentially accessing restricted services or data on the h…

    Sunbird DCIM dcTrack IQ
  • Medium 6.7
    CVE-2025-66237

    Sunbird DCIM dcTrack and Power IQ Use of Hard-coded Credentials

    DCIM dcTrack platforms utilize default and hard-coded credentials for access. An attacker could use these credentials to administer the database, escalate privileges on the platform or execute system commands on the host.

    Sunbird DCIM dcTrack Power IQ

Revision history

  1. #1

    Initial Publication

References