CVE-2025-66238 — Sunbird DCIM dcTrack and Power IQ Authentication Bypass Using an Alternate Path or Channel
DCIM dcTrack allows an attacker to misuse certain remote access features. An authenticated user with access to the appliance's virtual console could exploit these features to re…
Published: 2025-12-04 · CVSS: 7.4 · CVSS 4.0
DCIM dcTrack allows an attacker to misuse certain remote access features. An authenticated user with access to the appliance's virtual console could exploit these features to redirect network traffic, potentially accessing restricted services or data on the host machine.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7