Description
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parameter. An authenticated malicious agent can exploit this vulnerability to execute arbitrary command on the underlying Linux operating system.
Published: 2023-08-14
Score: 7.2 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2023-43936 The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parameter. An authenticated malicious agent can exploit this vulnerability to execute arbitrary command on the underlying Linux operating system.
History

Wed, 09 Oct 2024 14:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Subscriptions

Cyberpower Powerpanel Server
Dataprobe Iboot-pdu4-c20 Iboot-pdu4-c20 Firmware Iboot-pdu4-n20 Iboot-pdu4-n20 Firmware Iboot-pdu4a-c10 Iboot-pdu4a-c10 Firmware Iboot-pdu4a-c20 Iboot-pdu4a-c20 Firmware Iboot-pdu4a-n15 Iboot-pdu4a-n15 Firmware Iboot-pdu4a-n20 Iboot-pdu4a-n20 Firmware Iboot-pdu4sa-c10 Iboot-pdu4sa-c10 Firmware Iboot-pdu4sa-c20 Iboot-pdu4sa-c20 Firmware Iboot-pdu4sa-n15 Iboot-pdu4sa-n15 Firmware Iboot-pdu4sa-n20 Iboot-pdu4sa-n20 Firmware Iboot-pdu8a-2c10 Iboot-pdu8a-2c10 Firmware Iboot-pdu8a-2c20 Iboot-pdu8a-2c20 Firmware Iboot-pdu8a-2n15 Iboot-pdu8a-2n15 Firmware Iboot-pdu8a-2n20 Iboot-pdu8a-2n20 Firmware Iboot-pdu8a-c10 Iboot-pdu8a-c10 Firmware Iboot-pdu8a-c20 Iboot-pdu8a-c20 Firmware Iboot-pdu8a-n15 Iboot-pdu8a-n15 Firmware Iboot-pdu8a-n20 Iboot-pdu8a-n20 Firmware Iboot-pdu8sa-2n15 Iboot-pdu8sa-2n15 Firmware Iboot-pdu8sa-c10 Iboot-pdu8sa-c10 Firmware Iboot-pdu8sa-n15 Iboot-pdu8sa-n15 Firmware Iboot-pdu8sa-n20 Iboot-pdu8sa-n20 Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: trellix

Published:

Updated: 2024-10-09T13:23:37.663Z

Reserved: 2023-06-15T06:50:21.260Z

Link: CVE-2023-3260

cve-icon Vulnrichment

Updated: 2024-08-02T06:48:08.498Z

cve-icon NVD

Status : Modified

Published: 2023-08-14T04:15:10.830

Modified: 2024-11-21T08:16:49.100

Link: CVE-2023-3260

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses