CVE-2022-3186

Name of the Vulnerable Software and Affected Versions Dataprobe iBoot-PDU FW versions prior to 1.42.06162022

Description The affected product allows an attacker to access the device's main management page from the cloud. This feature enables users to remotely connect devices, however, the current implementation permits users to access other devices' information.

Recommendations For versions prior to 1.42.06162022, update to version 1.42.06162022 or later to resolve the issue. As a temporary workaround, consider restricting access to the device's main management page from the cloud until a patch is applied.