Sunbird DCIM dcTrack vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Sunbird DCIM dcTrack: 2 record(s), with affected versions and fixes.

CVE-2025-66238 High · 7.2 CWE-288 Dec 4, 2025

Sunbird DCIM dcTrack and Power IQ Authentication Bypass Using an Alternate Path or Channel

DCIM dcTrack allows an attacker to misuse certain remote access features. An authenticated user with access to the appliance's virtual console could exploit these features to redirect network traffic, potentially accessing restricted services or data on the host machine.

CVE-2025-66237 Medium · 6.7 CWE-798 Dec 4, 2025

Sunbird DCIM dcTrack and Power IQ Use of Hard-coded Credentials

DCIM dcTrack platforms utilize default and hard-coded credentials for access. An attacker could use these credentials to administer the database, escalate privileges on the platform or execute system commands on the host.