Vulnerabilities

TI-2022-23060 CVE-2022-46658 · GHSA-wx8f-hp3p-f4v8

The affected product is vulnerable to a stack-based buffer overflow which could lead to a…

MEDIUM 45

The affected product is vulnerable to a stack-based buffer overflow which could lead to a denial of service or remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01229 Published 2023-05-22 Fixed in 1.42.06162022

TI-2022-23113 CVE-2022-46738 · GHSA-w9xj-7xh9-mq78

MEDIUM 49

The affected product exposes multiple sensitive data fields of the affected product.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00581 Published 2023-05-22 Fixed in 1.42.06162022

TI-2022-23410 CVE-2022-47320 · GHSA-9x97-7gh3-f487

LOW 38

The iBoot device’s basic discovery protocol assists in initial device configuration.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00506 Published 2023-05-22 Fixed in 1.42.06162022

TI-2022-23407 CVE-2022-47311 · GHSA-98hm-c56g-vjqc

LOW 39

A proprietary protocol for iBoot devices is used for control and keepalive commands.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00517 Published 2023-05-22 Fixed in 1.42.06162022

TI-2022-04536 CVE-2022-4945 · GHSA-gx4c-qrx5-9w6f

LOW 28

The Dataprobe cloud usernames and passwords are stored in plain text in a specific file.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00174 Published 2023-05-22 Fixed in 1.42.06162022