Read the docs
TI-2022-23060 Aliases CVE-2022-46658GHSA-wx8f-hp3p-f4v8

The affected product is vulnerable to a stack-based buffer overflow which could lead to a…

Priority MEDIUM 45Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

The affected product is vulnerable to a stack-based buffer overflow which could lead to a denial of service or remote code execution.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01229 69th percentileScored 2026-11-07
Fix Fixed Dataprobe iBoot-PDU FW (Dataprobe, Inc.): 1.42.06162022

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
DataprobeDataprobe iBoot-PDU FWbefore 1.42.061620221.42.06162022Patch availableCNA
  • Dataprobe iBoot-PDU FW VendorDataprobe Affected before 1.42.06162022 Fixed in 1.42.06162022 Patch available CNA

CPE configurations NVD · 44

CPEVersionsRoleVendor
cpe:2.3:o:dataprobe:iboot-pdu4-n20_firmware:*:*:*:*:*:*:*:*before 1.42.06162022VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu4-n20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu4sa-n15_firmware:*:*:*:*:*:*:*:*before 1.42.06162022VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu4sa-n15:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu4a-n15_firmware:*:*:*:*:*:*:*:*before 1.42.06162022VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu4a-n15:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu4sa-n20_firmware:*:*:*:*:*:*:*:*before 1.42.06162022VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu4sa-n20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu4a-n20_firmware:*:*:*:*:*:*:*:*before 1.42.06162022VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu4a-n20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu4-n20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu4-n20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu4sa-n15_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu4sa-n15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu4a-n15_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu4a-n15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu4sa-n20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu4sa-n20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu4a-n20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu4a-n20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
Show 34 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:dataprobe:iboot-pdu8sa-n15_firmware:*:*:*:*:*:*:*:*before 1.42.06162022VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8sa-n15:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8a-n15_firmware:*:*:*:*:*:*:*:*before 1.42.06162022VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8a-n15:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8sa-2n15_firmware:*:*:*:*:*:*:*:*before 1.42.06162022VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8sa-2n15:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8a-2n15_firmware:*:*:*:*:*:*:*:*before 1.42.06162022VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8a-2n15:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8sa-n20_firmware:*:*:*:*:*:*:*:*before 1.42.06162022VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8sa-n20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8a-n20_firmware:*:*:*:*:*:*:*:*before 1.42.06162022VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8a-n20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8a-2n20_firmware:*:*:*:*:*:*:*:*before 1.42.06162022VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8a-2n20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu4-c20_firmware:*:*:*:*:*:*:*:*before 1.42.06162022VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu4-c20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu4a-c10_firmware:*:*:*:*:*:*:*:*before 1.42.06162022VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu4a-c10:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu4sa-c10_firmware:*:*:*:*:*:*:*:*before 1.42.06162022VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu4sa-c10:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8a-c10_firmware:*:*:*:*:*:*:*:*before 1.42.06162022VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8a-c10:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8sa-c10_firmware:*:*:*:*:*:*:*:*before 1.42.06162022VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8sa-c10:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8a-2c20_firmware:*:*:*:*:*:*:*:*before 1.42.06162022VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8a-2c20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu4sa-c20_firmware:*:*:*:*:*:*:*:*before 1.42.06162022VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu4sa-c20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu4a-c20_firmware:*:*:*:*:*:*:*:*before 1.42.06162022VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu4a-c20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8a-2c10_firmware:*:*:*:*:*:*:*:*before 1.42.06162022VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8a-2c10:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8a-c20_firmware:*:*:*:*:*:*:*:*before 1.42.06162022VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8a-c20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8sa-n15_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8sa-n15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8a-n15_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8a-n15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8sa-2n15_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8sa-2n15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8a-2n15_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8a-2n15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8sa-n20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8sa-n20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8a-n20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8a-n20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8a-2n20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8a-2n20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu4-c20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu4-c20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu4a-c10_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu4a-c10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu4sa-c10_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu4sa-c10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8a-c10_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8a-c10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8sa-c10_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8sa-c10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8a-2c20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8a-2c20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu4sa-c20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu4sa-c20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu4a-c20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu4a-c20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8a-2c10_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8a-2c10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8a-c20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8a-c20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe

Remediation

  • Fix · CNA Dataprobe iBoot-PDU FW (Dataprobe, Inc.) Fixed in 1.42.06162022

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Dataprobe iBoot-PDU FW 1.42.06162022

    5 records Highest priority Priority MEDIUM 2 MEDIUM, 3 LOW

    Other records, highest priority first

    • TI-2022-23113 The affected product exposes multiple sensitive data fields of the affected product.Priority MEDIUM 49
    • TI-2022-23407 A proprietary protocol for iBoot devices is used for control and keepalive commands.Priority LOW 39
    • TI-2022-23410 The iBoot device’s basic discovery protocol assists in initial device configuration.Priority LOW 38
    Show all 5 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-46658
  2. 2026-10-03 Alias added: GHSA-wx8f-hp3p-f4v8

References

Patch 1

Other 1

  • TI-2023-03052 Deserialization of untrusted data in Dataprobe iBoot PDU CVSS 3.1CRITICAL 9.8
  • TI-2022-23113 The affected product exposes multiple sensitive data fields of the affected product. CVSS 3.1CRITICAL 9.8
  • TI-2023-03057 Hard-coded credentials in Dataprobe iBoot PDU CVSS 3.1CRITICAL 9.8
  • TI-2023-03053 OS command injection in Dataprobe iBoot PDU CVSS 3.1HIGH 8.8
  • TI-2023-03056 Improper authentication in Dataprobe iBoot PDU CVSS 3.1HIGH 7.5
  • TI-2023-03054 Memory corruption in Dataprobe iBoot PDU CVSS 3.1HIGH 7.5
See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences