CVE-2023-3262

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal Postgres database.A malicious agent with the ability to execute operating system commands on the device can leverage this vulnerability to read, modify, or delete arbitrary database records.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.7 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
dataprobeiboot-pdu4a-c10_firmware
𝑥
< 1.44.0804202
dataprobeiboot-pdu4a-c20_firmware
𝑥
< 1.44.0804202
dataprobeiboot-pdu4a-n15_firmware
𝑥
< 1.44.0804202
dataprobeiboot-pdu4a-n20_firmware
𝑥
< 1.44.0804202
dataprobeiboot-pdu4-c20_firmware
𝑥
< 1.44.0804202
dataprobeiboot-pdu4-n20_firmware
𝑥
< 1.44.0804202
dataprobeiboot-pdu4sa-c10_firmware
𝑥
< 1.44.0804202
dataprobeiboot-pdu4sa-c20_firmware
𝑥
< 1.44.0804202
dataprobeiboot-pdu4sa-n15_firmware
𝑥
< 1.44.0804202
dataprobeiboot-pdu4sa-n20_firmware
𝑥
< 1.44.0804202
dataprobeiboot-pdu8a-2c10_firmware
𝑥
< 1.44.0804202
dataprobeiboot-pdu8a-2c20_firmware
𝑥
< 1.44.0804202
dataprobeiboot-pdu8a-2n15_firmware
𝑥
< 1.44.0804202
dataprobeiboot-pdu8a-2n20_firmware
𝑥
< 1.44.0804202
dataprobeiboot-pdu8a-c10_firmware
𝑥
< 1.44.0804202
dataprobeiboot-pdu8a-c20_firmware
𝑥
< 1.44.0804202
dataprobeiboot-pdu8a-n15_firmware
𝑥
< 1.44.0804202
dataprobeiboot-pdu8a-n20_firmware
𝑥
< 1.44.0804202
dataprobeiboot-pdu8sa-2n15_firmware
𝑥
< 1.44.0804202
dataprobeiboot-pdu8sa-c10_firmware
𝑥
< 1.44.0804202
dataprobeiboot-pdu8sa-n15_firmware
𝑥
< 1.44.0804202
dataprobeiboot-pdu8sa-n20_firmware
𝑥
< 1.44.0804202
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
dataprobeiboot_pdu
𝑥
≤ 1.43.03312023
ADP
Common Weakness Enumeration
References
https://www.trellix.com/en-us/about/newsroom/stories/research/the-threat-lurking-in-data-centers.html
https://www.trellix.com/en-us/about/newsroom/stories/research/the-threat-lurking-in-data-centers.html