cbcvebase.
CVE-2023-3260
published 2023-08-14

CVE-2023-3260: The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parameter. An…

PriorityP260high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
1.19%
64.1th percentile
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parameter. An authenticated malicious agent can exploit this vulnerability to execute arbitrary command on the underlying Linux operating system.

Affected

24 ranges
VendorProductVersion rangeFixed in
cyberpowerpowerpanel_server< 2.6.92.6.9
dataprobeiboot-pdu4-c20_firmware< 1.44.08042021.44.0804202
dataprobeiboot-pdu4-n20_firmware< 1.44.08042021.44.0804202
dataprobeiboot-pdu4a-c10_firmware< 1.44.08042021.44.0804202
dataprobeiboot-pdu4a-c20_firmware< 1.44.08042021.44.0804202
dataprobeiboot-pdu4a-n15_firmware< 1.44.08042021.44.0804202
dataprobeiboot-pdu4a-n20_firmware< 1.44.08042021.44.0804202
dataprobeiboot-pdu4sa-c10_firmware< 1.44.08042021.44.0804202
dataprobeiboot-pdu4sa-c20_firmware< 1.44.08042021.44.0804202
dataprobeiboot-pdu4sa-n15_firmware< 1.44.08042021.44.0804202
dataprobeiboot-pdu4sa-n20_firmware< 1.44.08042021.44.0804202
dataprobeiboot-pdu8a-2c10_firmware< 1.44.08042021.44.0804202
dataprobeiboot-pdu8a-2c20_firmware< 1.44.08042021.44.0804202
dataprobeiboot-pdu8a-2n15_firmware< 1.44.08042021.44.0804202
dataprobeiboot-pdu8a-2n20_firmware< 1.44.08042021.44.0804202
dataprobeiboot-pdu8a-c10_firmware< 1.44.08042021.44.0804202
dataprobeiboot-pdu8a-c20_firmware< 1.44.08042021.44.0804202
dataprobeiboot-pdu8a-n15_firmware< 1.44.08042021.44.0804202
dataprobeiboot-pdu8a-n20_firmware< 1.44.08042021.44.0804202
dataprobeiboot-pdu8sa-2n15_firmware< 1.44.08042021.44.0804202
dataprobeiboot-pdu8sa-c10_firmware< 1.44.08042021.44.0804202
dataprobeiboot-pdu8sa-n15_firmware< 1.44.08042021.44.0804202
dataprobeiboot-pdu8sa-n20_firmware< 1.44.08042021.44.0804202
dataprobeiboot_pdu>= 1.43.03312023 < <= 1.43.03312023<= 1.43.03312023
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.