HIGH🇵🇱 Wersja polska

CVE-2023-3263

CVSS 7.5v3.1pub. 2023-08-14upd. 2024-11-21

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass in the REST API due to the mishandling of special characters when parsing credentials.Successful exploitation allows the malicious agent to obtain a valid authorization token and read information relating to the state of the relays and power distribution.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Dataprobe Iboot Pdu4a C10

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu4a C10 Firmware

    OS
    Dataprobe
    < 1.44.0804202

  • Dataprobe Iboot Pdu4a C20

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu4a C20 Firmware

    OS
    Dataprobe
    < 1.44.0804202

  • Dataprobe Iboot Pdu4a N15

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu4a N15 Firmware

    OS
    Dataprobe
    < 1.44.0804202

  • Dataprobe Iboot Pdu4a N20

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu4a N20 Firmware

    OS
    Dataprobe
    < 1.44.0804202

  • Dataprobe Iboot Pdu4 C20

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu4 C20 Firmware

    OS
    Dataprobe
    < 1.44.0804202

  • Dataprobe Iboot Pdu4 N20

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu4 N20 Firmware

    OS
    Dataprobe
    < 1.44.0804202

  • Dataprobe Iboot Pdu4sa C10

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu4sa C10 Firmware

    OS
    Dataprobe
    < 1.44.0804202

  • Dataprobe Iboot Pdu4sa C20

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu4sa C20 Firmware

    OS
    Dataprobe
    < 1.44.0804202

  • Dataprobe Iboot Pdu4sa N15

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu4sa N15 Firmware

    OS
    Dataprobe
    < 1.44.0804202

  • Dataprobe Iboot Pdu4sa N20

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu4sa N20 Firmware

    OS
    Dataprobe
    < 1.44.0804202

  • Dataprobe Iboot Pdu8a 2c10

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu8a 2c10 Firmware

    OS
    Dataprobe
    < 1.44.0804202

  • Dataprobe Iboot Pdu8a 2c20

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu8a 2c20 Firmware

    OS
    Dataprobe
    < 1.44.0804202

  • Dataprobe Iboot Pdu8a 2n15

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu8a 2n15 Firmware

    OS
    Dataprobe
    < 1.44.0804202

  • Dataprobe Iboot Pdu8a 2n20

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu8a 2n20 Firmware

    OS
    Dataprobe
    < 1.44.0804202

  • Dataprobe Iboot Pdu8a C10

    HW
    Dataprobe
    all versions

  • Dataprobe Iboot Pdu8a C10 Firmware

    OS
    Dataprobe
    < 1.44.0804202
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2023-3259CRITICAL9.8PL ✓same product

Authentication bypass przez manipulację cookie w Dataprobe iBoot PDU

CVE-2022-3183CRITICAL9.8PL ✓same product

Command injection w firmware urządzeń Dataprobe iBoot-PDU

CVE-2022-3184CRITICAL9.8PL ✓same product

Path traversal w Dataprobe iBoot-PDU umożliwiający zapis pliku do webroot

CVE-2023-3260HIGH7.2same product

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection v...

CVE-2023-3261HIGH7.5same product

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerabi...