Sunbird DCIM dcTrack and Power IQ

An attacker with local access or knowledge of hardcoded credentials could gain unauthorized access to dcTrack or Power IQ, potentially allowing them to view sensitive facility data, modify configurations, or cause denial of service in your data center power monitoring systems.

Energy sector organizations using Sunbird DCIM dcTrack or Power IQ for data center infrastructure and power monitoring should prioritize this. If your facility uses these products to monitor power distribution, UPS systems, cooling, or infrastructure health, you are affected. Small to mid-size utilities with data centers or server rooms managing their own facilities are typical users.

An attacker could exploit improper authentication or hardcoded credentials to log into dcTrack or Power IQ without valid user credentials. If SSH access is reachable from the network, they could authenticate using default or embedded passwords, gaining administrative control over power and infrastructure monitoring.