CVE-2023-3261

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful exploitation could cause denial of service or unexpected behavior with respect to all interactions relying on the targeted vulnerable binary...

CVE-2023-3261

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful exploitation could cause denial of service or unexpected behavior with respect to all interactions relying on the targeted vulnerable binary...

CVE-2023-3260

CVE-2023-3260 affects the Dataprobe iBoot PDU; firmware versions 1.43.03312023 and earlier are vulnerable to OS command injection via the user-name URL parameter. An authenticated attacker can execute arbitrary commands on the underlying Linux OS. Public sources corroborate an authenticated RCE v...

CVE-2023-3260

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the user-name URL parameter. An authenticated malicious agent can exploit this vulnerability to execute arbitrary command on the underlying Linux operating system...

CVE-2023-3260

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the user-name URL parameter. An authenticated malicious agent can exploit this vulnerability to execute arbitrary command on the underlying Linux operating system...

CVE-2023-3259

The CVE-2023-3259 issue affects Dataprobe iBoot PDU firmware ≤ 1.43.03312023, where Deserialization of Untrusted Data allows authentication bypass via the iBootPduSiteAuth cookie, enabling an attacker to perform admin-level actions (e.g., power control, user management, data exposure). Public det...

CVE-2023-3259

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass. By manipulating the IP address field in the "iBootPduSiteAuth" cookie, a malicious agent can direct the device to connect to a rouge database.Successful exploitation allows the...

CVE-2023-3259

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass. By manipulating the IP address field in the "iBootPduSiteAuth" cookie, a malicious agent can direct the device to connect to a rouge database.Successful exploitation allows the...

Dataprobe Trust Management Issue Vulnerability

Dataprobe is a family of intelligent power switching and management products from Dataprobe, Inc. in the United States. Dataprobe iBoot PDU 1.43.03312023 and prior versions suffer from a Trust Management Issue vulnerability that stems from vulnerability to authentication bypass attacks in the RES...

Dataprobe Code Issue Vulnerability

Dataprobe is a line of intelligent power switches and management products from Dataprobe, Inc. in the United States. A security vulnerability exists in Dataprobe iBoot PDU version 1.43.03312023 and earlier versions. The vulnerability stems from the presence of deserialization of untrusted data in...

Dataprobe OS Command Injection Vulnerability

Dataprobe is a family of intelligent power switches and management products from Dataprobe, Inc. in the United States. An operating system command injection vulnerability exists in Dataprobe iBoot PDU version 1.43.03312023 and prior versions, which stems from a buffer overflow contained in the...

Dataprobe Authorization Issues Vulnerability

Dataprobe is a family of intelligent power switch and management products from Dataprobe, Inc. in the United States. A security vulnerability exists in Dataprobe iBoot PDU version 1.43.03312023 and prior versions, which stems from vulnerability to authentication bypass attacks in the REST API, an...

Dataprobe Trust Management Issue Vulnerability

Dataprobe is a line of intelligent power switches and management products from Dataprobe, Inc. in the United States. A security vulnerability exists in Dataprobe iBoot PDU version 1.43.03312023 and prior versions, which stems from the use of hard-coded credentials to interact with the internal...

Dataprobe OS Command Injection Vulnerability

Dataprobe is a series of intelligent power switch and management products from Dataprobe, Inc. in the United States. Dataprobe iBoot PDU 1.43.03312023 and earlier versions suffer from an operating system command injection vulnerability that stems from an attack that is prone to command injection...

PT-2023-23928 · Dataprobe · Dataprobe Iboot Pdu

Name of the Vulnerable Software and Affected Versions: Dataprobe iBoot PDU version 1.43.03312023 or earlier Description: The issue concerns the use of hard-coded credentials for interactions with the internal Postgres database and an authentication bypass vulnerability in the REST API due to the...

PT-2023-23903 · Dataprobe · Dataprobe Iboot Pdu

Name of the Vulnerable Software and Affected Versions: Dataprobe iBoot PDU versions 1.43.03312023 or earlier Description: The issue concerns command injection via the user-name URL parameter. An authenticated malicious agent can exploit this to execute arbitrary commands on the underlying Linux...

PT-2023-23894 · Dataprobe · Dataprobe Iboot Pdu

Name of the Vulnerable Software and Affected Versions: Dataprobe iBoot PDU version 1.43.03312023 or earlier Description: The issue allows a malicious agent to bypass authentication by manipulating the IP address field in the iBootPduSiteAuth cookie, directing the device to connect to a rogue...

CVE-2022-47320

The iBoot device’s basic discovery protocol assists in initial device configuration. The discovery protocol shows basic information about devices on the network and allows users to perform configuration changes...

CVE-2022-47320

The iBoot device’s basic discovery protocol assists in initial device configuration. The discovery protocol shows basic information about devices on the network and allows users to perform configuration changes...

CVE-2022-47311

A proprietary protocol for iBoot devices is used for control and keepalive commands. The function compares the username and password; it also contains the configuration data for the user specified. If the user does not exist, then it sends a value for username and password, which allows successfu...