Skip to content
OpenAdvisories
High · 8.5 CVE-2022-47311 EUVD-2022-50086GHSA-98hm-c56g-vjqc

CVE-2022-47311

Published May 22, 2023 · Updated Jan 16, 2025 · Assigned by icscert

Description

A proprietary protocol for iBoot devices is used for control and keepalive commands. The function compares the username and password; it also contains the configuration data for the user specified. If the user does not exist, then it sends a value for username and password, which allows successful authentication for a connection.

Affected products

VendorProductAffectedFixed
Dataprobe Dataprobe iBoot-PDU FW < 1.42.06162022 1.42.06162022

Advisories 1

References