Bypassing NAT to Attack Dataprobe iBoot-PDUs
ID: e1cd6a86-1ea2-55c2-ab2c-ea02f9929662
STIX ID: report--e1cd6a86-1ea2-55c2-ab2c-ea02f9929662
Feed Name: Claroty Team82
Threat Score
Team82 disclosed seven vulnerabilities in Dataprobe's iBoot-PDU and its cloud management platform—including pre-auth remote code execution, path traversal, SSRF, and access-control failures—that allow attackers to enumerate cloud-connected devices, bypass NAT/firewalls, execute code on PDUs, and remotely control power outlets; Dataprobe issued patches and recommends updating to Version 1.42.06162022 and disabling unused services.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.