CVE-2023-3260

🗓️ 14 Aug 2023 03:51:52Reported by trellixType

Dataprobe iBoot PDU firmware version 1.43.03312023 and earlier allows command injection via the `user-name` URL parameter

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2023-3260	14 Aug 202307:19	–	circl
CNNVD	Dataprobe OS Command Injection Vulnerability	14 Aug 202300:00	–	cnnvd
Cvelist	CVE-2023-3260	14 Aug 202303:51	–	cvelist
EUVD	EUVD-2023-43936	3 Oct 202520:07	–	euvd
NVD	CVE-2023-3260	14 Aug 202304:15	–	nvd
OSV	CVE-2023-3260	14 Aug 202304:15	–	osv
Prion	Command injection	14 Aug 202304:15	–	prion
Positive Technologies	PT-2023-23903 · Dataprobe · Dataprobe Iboot Pdu	13 Aug 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-3260	23 May 202503:49	–	redhatcve
The Hacker News	Multiple Flaws in CyberPower and Dataprobe Products Put Data Centers at Risk	12 Aug 202321:00	–	thn

NVD

Node

cyberpower powerpanel_serverRange<2.6.9enterprise

Node

dataprobe iboot-pdu4a-c10_firmwareRange<1.44.0804202

AND

dataprobe iboot-pdu4a-c10Match-

Node

dataprobe iboot-pdu4a-c20_firmwareRange<1.44.0804202

AND

dataprobe iboot-pdu4a-c20Match-

Node

dataprobe iboot-pdu4a-n15_firmwareRange<1.44.0804202

AND

dataprobe iboot-pdu4a-n15Match-

Node

dataprobe iboot-pdu4a-n20_firmwareRange<1.44.0804202

AND

dataprobe iboot-pdu4a-n20Match-

Node

dataprobe iboot-pdu4-c20_firmwareRange<1.44.0804202

AND

dataprobe iboot-pdu4-c20Match-

Node

dataprobe iboot-pdu4-n20_firmwareRange<1.44.0804202

AND

dataprobe iboot-pdu4-n20Match-

Node

dataprobe iboot-pdu4sa-c10_firmwareRange<1.44.0804202

AND

dataprobe iboot-pdu4sa-c10Match-

Node

dataprobe iboot-pdu4sa-c20_firmwareRange<1.44.0804202

AND

dataprobe iboot-pdu4sa-c20Match-

Node

dataprobe iboot-pdu4sa-n15_firmwareRange<1.44.0804202

AND

dataprobe iboot-pdu4sa-n15Match-

Node

dataprobe iboot-pdu4sa-n20_firmwareRange<1.44.0804202

AND

dataprobe iboot-pdu4sa-n20Match-

Node

dataprobe iboot-pdu8a-2c10_firmwareRange<1.44.0804202

AND

dataprobe iboot-pdu8a-2c10Match-

Node

dataprobe iboot-pdu8a-2c20_firmwareRange<1.44.0804202

AND

dataprobe iboot-pdu8a-2c20Match-

Node

dataprobe iboot-pdu8a-2n15_firmwareRange<1.44.0804202

AND

dataprobe iboot-pdu8a-2n15Match-

Node

dataprobe iboot-pdu8a-2n20_firmwareRange<1.44.0804202

AND

dataprobe iboot-pdu8a-2n20Match-

Node

dataprobe iboot-pdu8a-c10_firmwareRange<1.44.0804202

AND

dataprobe iboot-pdu8a-c10Match-

Node

dataprobe iboot-pdu8a-c20_firmwareRange<1.44.0804202

AND

dataprobe iboot-pdu8a-c20Match-

Node

dataprobe iboot-pdu8a-n15_firmwareRange<1.44.0804202

AND

dataprobe iboot-pdu8a-n15Match-

Node

dataprobe iboot-pdu8a-n20_firmwareRange<1.44.0804202

AND

dataprobe iboot-pdu8a-n20Match-

Node

dataprobe iboot-pdu8sa-2n15_firmwareRange<1.44.0804202

AND

dataprobe iboot-pdu8sa-2n15Match-

Node

dataprobe iboot-pdu8sa-c10_firmwareRange<1.44.0804202

AND

dataprobe iboot-pdu8sa-c10Match-

Node

dataprobe iboot-pdu8sa-n15_firmwareRange<1.44.0804202

AND

dataprobe iboot-pdu8sa-n15Match-

Node

dataprobe iboot-pdu8sa-n20_firmwareRange<1.44.0804202

AND

dataprobe iboot-pdu8sa-n20Match-

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "iBoot PDU",
    "vendor": "Dataprobe",
    "versions": [
      {
        "lessThan": "<= 1.43.03312023",
        "status": "affected",
        "version": "1.43.03312023",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
trellix	www.trellix.com/en-us/about/newsroom/stories/research/the-threat-lurking-in-data-centers.html

21 Nov 2024 08:16Current

8.8High risk

Vulners AI Score8.8

CVSS 3.17.2 - 8.8

EPSS0.00426

SSVC

CWE-78