PT-2022-4840 · Dataprobe · Dataprobe Iboot Pdu

Claroty Research + 1 · Published 2022-09-20 · Updated 2022-12-28 · CVE-2022-3184

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dataprobe iBoot-PDU FW versions prior to 1.42.06162022

Description The issue is related to the device's existing firmware, which allows unauthenticated users to access an old PHP page vulnerable to directory traversal. This may enable a user to write a file to the webroot directory. The vulnerability is associated with incorrect restriction of the path name to a directory with limited access, which can be exploited by a remote attacker.

Recommendations For versions prior to 1.42.06162022, update the firmware to version 1.42.06162022 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable PHP page until a patch is available. Avoid using the vulnerable directory traversal functionality in the webroot directory until the issue is resolved.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2022-05900

CVE-2022-3184

Affected Products

Dataprobe Iboot Pdu

References · 9

• https://cisa.gov/uscert/ics/advisories/icsa-22-263-03 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-3184 · Security Note
• https://osv.dev/vulnerability/CVE-2022-3184 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-05900 · Security Note
• https://t.me/cibsecurity/55100 · Telegram Post
• https://t.me/true_secator/3450 · Telegram Post
• https://t.me/cvenotify/40397 · Telegram Post
• https://t.me/echeloneyes/696 · Telegram Post
• https://claroty.com/team82/research/jumping-nat-to-shut-down-electric-devices · Note