Skip to content
OpenAdvisories
High · 7.2 CVE-2025-66238 EUVD-2025-201312GHSA-q579-mcrq-q4vr

Sunbird DCIM dcTrack and Power IQ Authentication Bypass Using an Alternate Path or Channel

Published Dec 4, 2025 · Updated Dec 5, 2025 · Assigned by icscert

Description

DCIM dcTrack allows an attacker to misuse certain remote access features. An authenticated user with access to the appliance's virtual console could exploit these features to redirect network traffic, potentially accessing restricted services or data on the host machine.

Affected products

VendorProductAffectedFixed
Sunbird DCIM dcTrack ≤ v9.2.0 9.2.3
Sunbird IQ ≤ v9.2.0 9.2.1

Advisories 1

References