Dataprobe iBoot-PDU FW versions before 1.42.06162022 contain a vulnerability where the device’s existing firmware allows unauthenticated users to access an old PHP page vulnerable to directory traversal, which may allow a user to write a file to the webroot directory.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
dataprobe iboot-pdu4-n20_firmware |
||
dataprobe iboot-pdu4sa-n15_firmware |
||
dataprobe iboot-pdu4a-n15_firmware |
||
dataprobe iboot-pdu4sa-n20_firmware |
||
dataprobe iboot-pdu4a-n20_firmware |
||
dataprobe iboot-pdu8sa-n15_firmware |
||
dataprobe iboot-pdu8a-n15_firmware |
||
dataprobe iboot-pdu8sa-2n15_firmware |
||
dataprobe iboot-pdu8a-2n15_firmware |
||
dataprobe iboot-pdu8sa-n20_firmware |
||
dataprobe iboot-pdu8a-n20_firmware |
||
dataprobe iboot-pdu8a-2n20_firmware |
Vulmon