CVE-2023-3264
EUVD-2023-4394014.08.2023, 05:15
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal Postgres database. A malicious agent with the ability to execute operating system commands on the device can leverage this vulnerability to read, modify, or delete arbitrary database records.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| cyberpower | powerpanel_server | 𝑥 < 2.6.9 |
| dataprobe | iboot-pdu4a-c10_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu4a-c20_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu4a-n15_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu4a-n20_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu4-c20_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu4-n20_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu4sa-c10_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu4sa-c20_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu4sa-n15_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu4sa-n20_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu8a-2c10_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu8a-2c20_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu8a-2n15_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu8a-2n20_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu8a-c10_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu8a-c20_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu8a-n15_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu8a-n20_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu8sa-2n15_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu8sa-c10_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu8sa-n15_firmware | 𝑥 < 1.44.0804202 |
| dataprobe | iboot-pdu8sa-n20_firmware | 𝑥 < 1.44.0804202 |
𝑥
= Vulnerable software versions