CVE-2023-3260

CVE-2023-3260 affects the Dataprobe iBoot PDU; firmware versions 1.43.03312023 and earlier are vulnerable to OS command injection via the user-name URL parameter. An authenticated attacker can execute arbitrary commands on the underlying Linux OS. Public sources corroborate an authenticated RCE v...

CVE-2023-3260

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the user-name URL parameter. An authenticated malicious agent can exploit this vulnerability to execute arbitrary command on the underlying Linux operating system...

CVE-2023-3259

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass. By manipulating the IP address field in the "iBootPduSiteAuth" cookie, a malicious agent can direct the device to connect to a rouge database.Successful exploitation allows the...

CVE-2023-3259

The CVE-2023-3259 issue affects Dataprobe iBoot PDU firmware ≤ 1.43.03312023, where Deserialization of Untrusted Data allows authentication bypass via the iBootPduSiteAuth cookie, enabling an attacker to perform admin-level actions (e.g., power control, user management, data exposure). Public det...

CVE-2023-3259

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass. By manipulating the IP address field in the "iBootPduSiteAuth" cookie, a malicious agent can direct the device to connect to a rouge database.Successful exploitation allows the...

Dataprobe Authorization Issues Vulnerability

Dataprobe is a family of intelligent power switch and management products from Dataprobe, Inc. in the United States. A security vulnerability exists in Dataprobe iBoot PDU version 1.43.03312023 and prior versions, which stems from vulnerability to authentication bypass attacks in the REST API, an...

Dataprobe Trust Management Issue Vulnerability

Dataprobe is a family of intelligent power switching and management products from Dataprobe, Inc. in the United States. Dataprobe iBoot PDU 1.43.03312023 and prior versions suffer from a Trust Management Issue vulnerability that stems from vulnerability to authentication bypass attacks in the RES...

Dataprobe Code Issue Vulnerability

Dataprobe is a line of intelligent power switches and management products from Dataprobe, Inc. in the United States. A security vulnerability exists in Dataprobe iBoot PDU version 1.43.03312023 and earlier versions. The vulnerability stems from the presence of deserialization of untrusted data in...

PT-2023-23928 · Dataprobe · Dataprobe Iboot Pdu

Name of the Vulnerable Software and Affected Versions: Dataprobe iBoot PDU version 1.43.03312023 or earlier Description: The issue concerns the use of hard-coded credentials for interactions with the internal Postgres database and an authentication bypass vulnerability in the REST API due to the...

PT-2023-23894 · Dataprobe · Dataprobe Iboot Pdu

Name of the Vulnerable Software and Affected Versions: Dataprobe iBoot PDU version 1.43.03312023 or earlier Description: The issue allows a malicious agent to bypass authentication by manipulating the IP address field in the iBootPduSiteAuth cookie, directing the device to connect to a rogue...

pdu-casa.fr Cross Site Scripting vulnerability OBB-3465519

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-30362

Buffer Overflow vulnerability in coapsend function in libcoap library 4.3.1-103-g52cfd56 fixed in 4.3.1-120-ge242200 allows attackers to obtain sensitive information via malformed pdu...

Buffer overflow

Buffer Overflow vulnerability in coapsend function in libcoap library 4.3.1-103-g52cfd56 fixed in 4.3.1-120-ge242200 allows attackers to obtain sensitive information via malformed pdu...

UBUNTU-CVE-2023-30362

Buffer Overflow vulnerability in coapsend function in libcoap library 4.3.1-103-g52cfd56 fixed in 4.3.1-120-ge242200 allows attackers to obtain sensitive information via malformed pdu...

CVE-2023-30362

Buffer Overflow vulnerability in coapsend function in libcoap library 4.3.1-103-g52cfd56 fixed in 4.3.1-120-ge242200 allows attackers to obtain sensitive information via malformed pdu...

CVE-2023-30362

The CVE-2023-30362 vulnerability affects the libcoap library, specifically the coap_send function in version 4.3.1-103-g52cfd56. A Buffer Overflow in this function allows attackers to obtain sensitive information via malformed PDUs. The issue is fixed in version 4.3.1-120-ge242200. Several adviso...

CVE-2023-30362

Buffer Overflow vulnerability in coapsend function in libcoap library 4.3.1-103-g52cfd56 fixed in 4.3.1-120-ge242200 allows attackers to obtain sensitive information via malformed pdu...

Dataprobe iBoot-PDU 安全漏洞

The Dataprobe iBoot-PDU is a web-accessible managed PDU independently controlled outlet from Dataprobe USA. A security vulnerability exists in the Dataprobe iBoot-PDU FW prior to version 1.42.06162022, which stems from the iBoot device's basic discovery protocol displaying the initial device...

Dataprobe iBoot-PDU 安全漏洞

The Dataprobe iBoot-PDU is a web-accessible managed PDU independently controlled outlet from Dataprobe USA. A security vulnerability exists in Dataprobe iBoot-PDU FW prior to version 1.42.06162022, which stems from the product exposing multiple sensitive data fields, and can be exploited by an...

Dataprobe iBoot-PDU 安全漏洞

The Dataprobe iBoot-PDU is a web-accessible managed PDU independently controlled outlet from Dataprobe USA. A security vulnerability exists in Dataprobe iBoot-PDU FW prior to version 1.42.06162022, which stems from susceptibility to a stack-based buffer overflow that could result in denial of...