Sunbird DCIM dcTrack and Power IQ
4 december 2025 om 12:00:00
cisa.gov
CISA advisory for Sunbird DCIM dcTrack and Power IQ products containing two critical vulnerabilities: authentication bypass using alternate path (CVE-2025-66238) and hard-coded credentials (CVE-2025-66237). Both vulnerabilities affect versions 9.2.0 and prior, with CVSS scores of 7.4 and 8.4 respectively. Successful exploitation could allow unauthorized access, credential theft, privilege escalation, or system command execution. Sunbird has released patches - dcTrack 9.2.3 and Power IQ 9.2.1. The vulnerabilities impact critical infrastructure sectors including Information Technology and Critical Manufacturing worldwide.
Related links:
Related CVE's:
Related threat actors:
No threat actors found in this article
Affected products:
IOC's:
No IOCs found in this article