CVE-2023-3259
14.08.2023, 04:15
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass. By manipulating the IP address field in the "iBootPduSiteAuth" cookie, a malicious agent can direct the device to connect to a rouge database.Successful exploitation allows the malicious agent to take actions with administrator privileges including, but not limited to, manipulating power levels, modifying user accounts, and exporting confidential user informationEnginsight
| Vendor | Product | Version |
|---|---|---|
| dataprobe | iboot-pdu4a-c10_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu4a-c20_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu4a-n15_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu4a-n20_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu4-c20_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu4-n20_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu4sa-c10_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu4sa-c20_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu4sa-n15_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu4sa-n20_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu8a-2c10_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu8a-2c20_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu8a-2n15_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu8a-2n20_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu8a-c10_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu8a-c20_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu8a-n15_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu8a-n20_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu8sa-2n15_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu8sa-c10_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu8sa-n15_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu8sa-n20_firmware | 𝑥 < 1.44.0804202 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration