The iBoot device’s basic discovery protocol assists in initial device configuration.
Priority LOW 38Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
The iBoot device’s basic discovery protocol assists in initial device configuration. The discovery protocol shows basic information about devices on the network and allows users to perform configuration changes.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00506 43rd percentileScored 2026-11-07
Fix Fixed Dataprobe iBoot-PDU FW (Dataprobe, Inc.): 1.42.06162022
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Dataprobe | Dataprobe iBoot-PDU FW | before 1.42.06162022 | 1.42.06162022 | Patch available | CNA |
- Dataprobe iBoot-PDU FW VendorDataprobe Affected before 1.42.06162022 Fixed in 1.42.06162022 Patch available CNA
CPE configurations NVD · 44
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:dataprobe:iboot-pdu4-n20_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu4-n20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu4sa-n15_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu4sa-n15:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu4a-n15_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu4a-n15:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu4sa-n20_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu4sa-n20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu4a-n20_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu4a-n20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
- cpe:2.3:o:dataprobe:iboot-pdu4-n20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu4-n20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu4sa-n15_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu4sa-n15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu4a-n15_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu4a-n15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu4sa-n20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu4sa-n20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu4a-n20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu4a-n20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
Show 34 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:dataprobe:iboot-pdu8sa-n15_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu8sa-n15:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu8a-n15_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu8a-n15:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu8sa-2n15_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu8sa-2n15:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu8a-2n15_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu8a-2n15:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu8sa-n20_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu8sa-n20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu8a-n20_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu8a-n20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu8a-2n20_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu8a-2n20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu4-c20_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu4-c20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu4a-c10_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu4a-c10:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu4sa-c10_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu4sa-c10:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu8a-c10_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu8a-c10:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu8sa-c10_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu8sa-c10:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu8a-2c20_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu8a-2c20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu4sa-c20_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu4sa-c20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu4a-c20_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu4a-c20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu8a-2c10_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu8a-2c10:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
| cpe:2.3:o:dataprobe:iboot-pdu8a-c20_firmware:*:*:*:*:*:*:*:* | before 1.42.06162022 | Vulnerable | Dataprobe |
| cpe:2.3:h:dataprobe:iboot-pdu8a-c20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Dataprobe |
- cpe:2.3:o:dataprobe:iboot-pdu8sa-n15_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu8sa-n15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu8a-n15_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu8a-n15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu8sa-2n15_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu8sa-2n15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu8a-2n15_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu8a-2n15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu8sa-n20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu8sa-n20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu8a-n20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu8a-n20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu8a-2n20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu8a-2n20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu4-c20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu4-c20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu4a-c10_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu4a-c10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu4sa-c10_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu4sa-c10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu8a-c10_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu8a-c10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu8sa-c10_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu8sa-c10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu8a-2c20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu8a-2c20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu4sa-c20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu4sa-c20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu4a-c20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu4a-c20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu8a-2c10_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu8a-2c10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
- cpe:2.3:o:dataprobe:iboot-pdu8a-c20_firmware:*:*:*:*:*:*:*:* Versions before 1.42.06162022 Vulnerable ·Dataprobe
- cpe:2.3:h:dataprobe:iboot-pdu8a-c20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
Remediation
- Fix · CNA Dataprobe iBoot-PDU FW (Dataprobe, Inc.) Fixed in 1.42.06162022
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Dataprobe iBoot-PDU FW 1.42.06162022
5 records Highest priority Priority MEDIUM 2 MEDIUM, 3 LOW
Other records, highest priority first
- TI-2022-23113 The affected product exposes multiple sensitive data fields of the affected product.Priority MEDIUM 49
- TI-2022-23060 The affected product is vulnerable to a stack-based buffer overflow which could lead to a…Priority MEDIUM 45
- TI-2022-23407 A proprietary protocol for iBoot devices is used for control and keepalive commands.Priority LOW 39
Timeline
- 2026-10-02 Threatist record created from CVE-2022-47320
- 2026-10-03 Alias added: GHSA-9x97-7gh3-f487
References
More Dataprobe Iboot-pdu4-c20 Firmware vulnerabilities
- TI-2023-03052 Deserialization of untrusted data in Dataprobe iBoot PDU CVSS 3.1CRITICAL 9.8
- TI-2022-23113 The affected product exposes multiple sensitive data fields of the affected product. CVSS 3.1CRITICAL 9.8
- TI-2022-23060 The affected product is vulnerable to a stack-based buffer overflow which could lead to a… CVSS 3.1CRITICAL 9.8
- TI-2023-03057 Hard-coded credentials in Dataprobe iBoot PDU CVSS 3.1CRITICAL 9.8
- TI-2023-03053 OS command injection in Dataprobe iBoot PDU CVSS 3.1HIGH 8.8
- TI-2023-03056 Improper authentication in Dataprobe iBoot PDU CVSS 3.1HIGH 7.5
Sources
- CVE-2022-47320 · CVE Program
- CVE-2022-47320 · NVD
- FIRST EPSS
- GHSA-9x97-7gh3-f487 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences