CVE-2022-33175

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2022-06-13 · updated 2026-06-17
Weakness: CWE-732

Description

Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 have an insecure permissions setting on the user.token field that is accessible to everyone through the /cgi/get_param.cgi HTTP API. This leads to disclosing active session ids of currently logged-in administrators. The session id can then be reused to act as the administrator, allowing reading of the cleartext password, or reconfiguring the device.

Affected products

Powertekpdus Basic Pdu Firmware: before 3.30.30 — fixed in 3.30.30
Powertekpdus Piml Pdu Firmware: before 3.30.30 — fixed in 3.30.30
Powertekpdus Pm Pdu Firmware: before 3.30.30 — fixed in 3.30.30
Powertekpdus Smart Pim Firmware: before 3.30.30 — fixed in 3.30.30
Powertekpdus Smart Pom Firmware: before 3.30.30 — fixed in 3.30.30
Powertekpdus Smart Poms Firmware: before 3.30.30 — fixed in 3.30.30
Powertekpdus Smart Pos Firmware: before 3.30.30 — fixed in 3.30.30

How to fix

Upgrade to a fixed version: Powertekpdus Basic Pdu Firmware 3.30.30; Powertekpdus Piml Pdu Firmware 3.30.30; Powertekpdus Pm Pdu Firmware 3.30.30; Powertekpdus Smart Pim Firmware 3.30.30; Powertekpdus Smart Pom Firmware 3.30.30; Powertekpdus Smart Poms Firmware 3.30.30; Powertekpdus Smart Pos Firmware 3.30.30. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-33175 or the next vulnerability affects your stack