CVE-2022-47320 Vulnerability Details

  /     /     /  

CVE-2022-47320 Metadata Quick Info

CVE Published: 22/05/2023 | CVE Updated: 03/08/2024 | CVE Year: 2022
Source: icscert | Vendor: Dataprobe, Inc. | Product: Dataprobe iBoot-PDU FW
Status : PUBLISHED

---

CVE-2022-47320 Description

The iBoot device’s basic discovery protocol assists in initial device configuration. The discovery protocol shows basic information about devices on the network and allows users to perform configuration changes.

Metrics

CVSS Version: 3.1 | Base Score: 8.1 HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

l➤ Exploitability Metrics:
    Attack Vector (AV)* NETWORK
    Attack Complexity (AC)* LOW
    Privileges Required (PR)* LOW
    User Interaction (UI)* NONE
    Scope (S)* UNCHANGED

l➤ Impact Metrics:
    Confidentiality Impact (C)* HIGH
    Integrity Impact (I)* HIGH
    Availability Impact (A)* NONE

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: CWE-288 Authentication Bypass Using an Alternate Path or Channel
Source: Dataprobe, Inc.

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).