9.8

CVE-2023-3264

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal Postgres database. A malicious agent with the ability to execute operating system commands on the device can leverage this vulnerability to read, modify, or delete arbitrary database records.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cyberpower ≫ Powerpanel Server SwEditionenterprise Version < 2.6.9
Dataprobe ≫ Iboot-pdu4a-c10 Firmware Version < 1.44.0804202
   Dataprobe ≫ Iboot-pdu4a-c10 Version-
Dataprobe ≫ Iboot-pdu4a-c20 Firmware Version < 1.44.0804202
   Dataprobe ≫ Iboot-pdu4a-c20 Version-
Dataprobe ≫ Iboot-pdu4a-n15 Firmware Version < 1.44.0804202
   Dataprobe ≫ Iboot-pdu4a-n15 Version-
Dataprobe ≫ Iboot-pdu4a-n20 Firmware Version < 1.44.0804202
   Dataprobe ≫ Iboot-pdu4a-n20 Version-
Dataprobe ≫ Iboot-pdu4-c20 Firmware Version < 1.44.0804202
   Dataprobe ≫ Iboot-pdu4-c20 Version-
Dataprobe ≫ Iboot-pdu4-n20 Firmware Version < 1.44.0804202
   Dataprobe ≫ Iboot-pdu4-n20 Version-
Dataprobe ≫ Iboot-pdu4sa-c10 Firmware Version < 1.44.0804202
   Dataprobe ≫ Iboot-pdu4sa-c10 Version-
Dataprobe ≫ Iboot-pdu4sa-c20 Firmware Version < 1.44.0804202
   Dataprobe ≫ Iboot-pdu4sa-c20 Version-
Dataprobe ≫ Iboot-pdu4sa-n15 Firmware Version < 1.44.0804202
   Dataprobe ≫ Iboot-pdu4sa-n15 Version-
Dataprobe ≫ Iboot-pdu4sa-n20 Firmware Version < 1.44.0804202
   Dataprobe ≫ Iboot-pdu4sa-n20 Version-
Dataprobe ≫ Iboot-pdu8a-2c10 Firmware Version < 1.44.0804202
   Dataprobe ≫ Iboot-pdu8a-2c10 Version-
Dataprobe ≫ Iboot-pdu8a-2c20 Firmware Version < 1.44.0804202
   Dataprobe ≫ Iboot-pdu8a-2c20 Version-
Dataprobe ≫ Iboot-pdu8a-2n15 Firmware Version < 1.44.0804202
   Dataprobe ≫ Iboot-pdu8a-2n15 Version-
Dataprobe ≫ Iboot-pdu8a-2n20 Firmware Version < 1.44.0804202
   Dataprobe ≫ Iboot-pdu8a-2n20 Version-
Dataprobe ≫ Iboot-pdu8a-c10 Firmware Version < 1.44.0804202
   Dataprobe ≫ Iboot-pdu8a-c10 Version-
Dataprobe ≫ Iboot-pdu8a-c20 Firmware Version < 1.44.0804202
   Dataprobe ≫ Iboot-pdu8a-c20 Version-
Dataprobe ≫ Iboot-pdu8a-n15 Firmware Version < 1.44.0804202
   Dataprobe ≫ Iboot-pdu8a-n15 Version-
Dataprobe ≫ Iboot-pdu8a-n20 Firmware Version < 1.44.0804202
   Dataprobe ≫ Iboot-pdu8a-n20 Version-
Dataprobe ≫ Iboot-pdu8sa-2n15 Firmware Version < 1.44.0804202
   Dataprobe ≫ Iboot-pdu8sa-2n15 Version-
Dataprobe ≫ Iboot-pdu8sa-c10 Firmware Version < 1.44.0804202
   Dataprobe ≫ Iboot-pdu8sa-c10 Version-
Dataprobe ≫ Iboot-pdu8sa-n15 Firmware Version < 1.44.0804202
   Dataprobe ≫ Iboot-pdu8sa-n15 Version-
Dataprobe ≫ Iboot-pdu8sa-n20 Firmware Version < 1.44.0804202
   Dataprobe ≫ Iboot-pdu8sa-n20 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.11% 0.3
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
trellixpsirt@trellix.com 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-798 Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.