CVE-2022-47311

A proprietary protocol for iBoot devices is used for control and keepalive commands. The function compares the username and password; it also contains the configuration data for the user specified. If the user does not exist, then it sends a value for username and password, which allows successful authentication for a connection.

• dataprobe iboot-pdu4-n20 firmware (< 1.42.06162022) • dataprobe iboot-pdu4sa-n15 firmware (< 1.42.06162022) • dataprobe iboot-pdu4a-n15 firmware (< 1.42.06162022) • dataprobe iboot-pdu4sa-n20 firmware (< 1.42.06162022) • dataprobe iboot-pdu4a-n20 firmware (< 1.42.06162022) • dataprobe iboot-pdu8sa-n15 firmware (< 1.42.06162022) • dataprobe iboot-pdu8a-n15 firmware (< 1.42.06162022) • dataprobe iboot-pdu8sa-2n15 firmware (< 1.42.06162022) • dataprobe iboot-pdu8a-2n15 firmware (< 1.42.06162022) • dataprobe iboot-pdu8sa-n20 firmware (< 1.42.06162022) • dataprobe iboot-pdu8a-n20 firmware (< 1.42.06162022) • dataprobe iboot-pdu8a-2n20 firmware (< 1.42.06162022) • dataprobe iboot-pdu4-c20 firmware (< 1.42.06162022) • dataprobe iboot-pdu4a-c10 firmware (< 1.42.06162022) • dataprobe iboot-pdu4sa-c10 firmware (< 1.42.06162022) • dataprobe iboot-pdu8a-c10 firmware (< 1.42.06162022) • dataprobe iboot-pdu8sa-c10 firmware (< 1.42.06162022) • dataprobe iboot-pdu8a-2c20 firmware (< 1.42.06162022) • dataprobe iboot-pdu4sa-c20 firmware (< 1.42.06162022) • dataprobe iboot-pdu4a-c20 firmware (< 1.42.06162022) • dataprobe iboot-pdu8a-2c10 firmware (< 1.42.06162022) • dataprobe iboot-pdu8a-c20 firmware (< 1.42.06162022)