The Dataprobe cloud usernames and passwords are stored in plain text in a specific file.
Priority LOW 28Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
The Dataprobe cloud usernames and passwords are stored in plain text in a specific file. Any user able to read this specific file from the device could compromise other devices connected to the user's cloud.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00174 6th percentileScored 2026-11-07
Fix Fixed Dataprobe iBoot-PDU FW (Dataprobe, Inc.): 1.42.06162022
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Dataprobe | Dataprobe iBoot-PDU FW | before 1.42.06162022 | 1.42.06162022 | Patch available | CNA |
- Dataprobe iBoot-PDU FW VendorDataprobe Affected before 1.42.06162022 Fixed in 1.42.06162022 Patch available CNA
CPE configurations NVD · 44
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:dataprobe:iboot-pdu4-n20_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu4-n20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu4sa-n15_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu4sa-n15:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu4a-n15_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu4a-n15:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu4sa-n20_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu4sa-n20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu4a-n20_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu4a-n20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
- cpe:2.3:o:dataprobe:iboot-pdu4-n20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu4-n20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu4sa-n15_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu4sa-n15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu4a-n15_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu4a-n15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu4sa-n20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu4sa-n20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu4a-n20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu4a-n20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
Show 34 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:dataprobe:iboot-pdu8sa-n15_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu8sa-n15:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu8a-n15_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu8a-n15:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu8sa-2n15_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu8sa-2n15:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu8a-2n15_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu8a-2n15:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu8sa-n20_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu8sa-n20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu8a-n20_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu8a-n20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu8a-2n20_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu8a-2n20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu4-c20_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu4-c20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu4a-c10_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu4a-c10:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu4sa-c10_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu4sa-c10:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu8a-c10_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu8a-c10:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu8sa-c10_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu8sa-c10:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu8a-2c20_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu8a-2c20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu4sa-c20_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu4sa-c20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu4a-c20_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu4a-c20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu8a-2c10_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu8a-2c10:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu8a-c20_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu8a-c20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
- cpe:2.3:o:dataprobe:iboot-pdu8sa-n15_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu8sa-n15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu8a-n15_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu8a-n15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu8sa-2n15_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu8sa-2n15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu8a-2n15_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu8a-2n15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu8sa-n20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu8sa-n20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu8a-n20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu8a-n20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu8a-2n20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu8a-2n20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu4-c20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu4-c20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu4a-c10_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu4a-c10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu4sa-c10_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu4sa-c10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu8a-c10_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu8a-c10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu8sa-c10_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu8sa-c10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu8a-2c20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu8a-2c20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu4sa-c20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu4sa-c20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu4a-c20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu4a-c20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu8a-2c10_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu8a-2c10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu8a-c20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu8a-c20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
Remediation
- Fix · CNA Dataprobe iBoot-PDU FW (Dataprobe, Inc.) Fixed in 1.42.06162022
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Dataprobe iBoot-PDU FW 1.42.06162022
5 records Highest priority Priority MEDIUM 2 MEDIUM, 3 LOW
Other records, highest priority first
- TI-2022-23113 The affected product exposes multiple sensitive data fields of the affected product.Priority MEDIUM 49
- TI-2022-23060 The affected product is vulnerable to a stack-based buffer overflow which could lead to a…Priority MEDIUM 45
- TI-2022-23407 A proprietary protocol for iBoot devices is used for control and keepalive commands.Priority LOW 39
Timeline
- 2026-10-02 Threatist record created from CVE-2022-4945
- 2026-10-03 Alias added: GHSA-gx4c-qrx5-9w6f
References
More Dataprobe Iboot-pdu4-c20 Firmware vulnerabilities
- TI-2023-03052 Deserialization of untrusted data in Dataprobe iBoot PDU CVSS 3.1CRITICAL 9.8
- TI-2022-23113 The affected product exposes multiple sensitive data fields of the affected product. CVSS 3.1CRITICAL 9.8
- TI-2022-23060 The affected product is vulnerable to a stack-based buffer overflow which could lead to a… CVSS 3.1CRITICAL 9.8
- TI-2023-03057 Hard-coded credentials in Dataprobe iBoot PDU CVSS 3.1CRITICAL 9.8
- TI-2023-03053 OS command injection in Dataprobe iBoot PDU CVSS 3.1HIGH 8.8
- TI-2023-03056 Improper authentication in Dataprobe iBoot PDU CVSS 3.1HIGH 7.5
Sources
- CVE-2022-4945 · CVE Program
- CVE-2022-4945 · NVD
- FIRST EPSS
- GHSA-gx4c-qrx5-9w6f · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences