CVE-2022-33174
9.8
CRITICAL · CVSS 3.1 · EPSS 14.1% (pctl 96)
Patch early
EPSS 14.1% — above the 10% action threshold.
Description
Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 allows remote authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interface (/cgi/get_param.cgi) with the tmpToken cookie set to an empty string followed by a semicolon. This bypasses an active session authorization check. This can be then used to fetch the values of protected sys.passwd and sys.su.name fields that contain the username and password in cleartext.
Scoring
| CVSS | 9.8 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 14.12% — more likely to be exploited than 96% of all CVEs |
| Weakness | CWE-863 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2022-06-13 |
| Last modified | 2026-06-17 |
Affected (14)
| Vendor | Product |
|---|---|
| powertekpdus | basic pdu |
| powertekpdus | basic pdu firmware |
| powertekpdus | piml pdu |
| powertekpdus | piml pdu firmware |
| powertekpdus | pm pdu |
| powertekpdus | pm pdu firmware |
| powertekpdus | smart pim |
| powertekpdus | smart pim firmware |
| powertekpdus | smart pom |
| powertekpdus | smart pom firmware |
| powertekpdus | smart poms |
| powertekpdus | smart poms firmware |
| powertekpdus | smart pos |
| powertekpdus | smart pos firmware |
→ the Explorer · watch your stack · NVD