HIGH🇵🇱 Wersja polska

CVE-2023-3261

CVSS 7.5v3.1pub. 2023-08-14upd. 2024-11-21

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful exploitation could cause denial of service or unexpected behavior with respect to all interactions relying on the targeted vulnerable binary, including the ability to log in via the web server.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Cyberpower Powerpanel Server

    APP
    Cyberpower
    < 2.6.9

  • Dataprobe Iboot Pdu4a C10

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu4a C10 Firmware

    OS
    Dataprobe
    < 1.44.0804202

  • Dataprobe Iboot Pdu4a C20

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu4a C20 Firmware

    OS
    Dataprobe
    < 1.44.0804202

  • Dataprobe Iboot Pdu4a N15

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu4a N15 Firmware

    OS
    Dataprobe
    < 1.44.0804202

  • Dataprobe Iboot Pdu4a N20

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu4a N20 Firmware

    OS
    Dataprobe
    < 1.44.0804202

  • Dataprobe Iboot Pdu4 C20

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu4 C20 Firmware

    OS
    Dataprobe
    < 1.44.0804202

  • Dataprobe Iboot Pdu4 N20

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu4 N20 Firmware

    OS
    Dataprobe
    < 1.44.0804202

  • Dataprobe Iboot Pdu4sa C10

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu4sa C10 Firmware

    OS
    Dataprobe
    < 1.44.0804202

  • Dataprobe Iboot Pdu4sa C20

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu4sa C20 Firmware

    OS
    Dataprobe
    < 1.44.0804202

  • Dataprobe Iboot Pdu4sa N15

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu4sa N15 Firmware

    OS
    Dataprobe
    < 1.44.0804202

  • Dataprobe Iboot Pdu4sa N20

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu4sa N20 Firmware

    OS
    Dataprobe
    < 1.44.0804202

  • Dataprobe Iboot Pdu8a 2c10

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu8a 2c10 Firmware

    OS
    Dataprobe
    < 1.44.0804202

  • Dataprobe Iboot Pdu8a 2c20

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu8a 2c20 Firmware

    OS
    Dataprobe
    < 1.44.0804202

  • Dataprobe Iboot Pdu8a 2n15

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu8a 2n15 Firmware

    OS
    Dataprobe
    < 1.44.0804202

  • Dataprobe Iboot Pdu8a 2n20

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu8a 2n20 Firmware

    OS
    Dataprobe
    < 1.44.0804202

  • Dataprobe Iboot Pdu8a C10

    HW
    Dataprobe
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoSMemoryCommand Injection
CWE
References

Related vulnerabilities

CVE-2023-3266CRITICAL9.8PL ✓same product

Pominięcie uwierzytelnienia w CyberPower PowerPanel Enterprise przez wybór LDAP

CVE-2023-3267CRITICAL9.1PL ✓same product

CyberPower PowerPanel Server — command injection w polu nazwy użytkownika

CVE-2023-3265CRITICAL9.8PL ✓same product

Authentication bypass w CyberPower PowerPanel Enterprise poprzez meta-znaki

CVE-2023-3259CRITICAL9.8PL ✓same product

Authentication bypass przez manipulację cookie w Dataprobe iBoot PDU

CVE-2022-3183CRITICAL9.8PL ✓same product

Command injection w firmware urządzeń Dataprobe iBoot-PDU