CVE:CVE-2022-33174
CNNVD:CNNVD-202206-1184
Powertek PDU是Powertek公司的高质量定制机架配电单元。
Powertek PDU 3.30.30之前版本存在安全漏洞，该漏洞源于配电单元允许在 Web 界面中绕过远程授权，攻击者利用该漏洞可以获取明文形式的用户名和密码。
solution:Upgrade powertekpdus basic_pdu_firmware to a higher version than 3.30.30,and avoid the version (,3.30.30); Upgrade powertekpdus pm_pdu_firmware to a higher version than 3.30.30,and avoid the version (,3.30.30); Upgrade powertekpdus piml_pdu_firmware to a higher version than 3.30.30,and avoid the version (,3.30.30); Upgrade powertekpdus smart_pim_firmware to a higher version than 3.30.30,and avoid the version (,3.30.30); Upgrade powertekpdus smart_pos_firmware to a higher version than 3.30.30,and avoid the version (,3.30.30); Upgrade powertekpdus smart_pom_firmware to a higher version than 3.30.30,and avoid the version (,3.30.30); Upgrade powertekpdus smart_poms_firmware to a higher version than 3.30.30,and avoid the version (,3.30.30)