Skip to content
OpenAdvisories
Medium · 6.7 CVE-2025-66237 EUVD-2025-201280GHSA-4xp3-78mx-mpfq

Sunbird DCIM dcTrack and Power IQ Use of Hard-coded Credentials

Published Dec 4, 2025 · Updated Jun 4, 2026 · Assigned by icscert

Description

DCIM dcTrack platforms utilize default and hard-coded credentials for access. An attacker could use these credentials to administer the database, escalate privileges on the platform or execute system commands on the host.

Affected products

VendorProductAffectedFixed
Sunbird DCIM dcTrack ≤ v9.2.0 9.2.3
Sunbird Power IQ ≤ v9.2.0 9.2.1

Advisories 1

References