Dataprobe Iboot-pdu4a-c20
11 CVEs affecting Dataprobe Iboot-pdu4a-c20. Latest disclosed: 2023-08-14. Critical: 1, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-3259 | Critical | 9.8 | 2023-08-14 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass. By manipulating the IP address field in the "… |
CVE-2022-47311 | High | 8.5 | 2023-05-22 | A proprietary protocol for iBoot devices is used for control and keepalive commands. The function compares the username and password; it also contains the conf… |
CVE-2022-47320 | High | 8.1 | 2023-05-22 | The iBoot device’s basic discovery protocol assists in initial device configuration. The discovery protocol shows basic information about devices on the networ… |
CVE-2023-3263 | High | 7.5 | 2023-08-14 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass in the REST API due to the mishandling of spec… |
CVE-2023-3261 | High | 7.5 | 2023-08-14 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful ex… |
CVE-2023-3260 | High | 7.2 | 2023-08-14 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parameter. An authenticate… |
CVE-2022-46738 | High | 7.2 | 2023-05-22 | The affected product exposes multiple sensitive data fields of the affected product. An attacker can use the SNMP command to get device mac address and login a… |
CVE-2023-3264 | Medium | 6.7 | 2023-08-14 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal Postgres database… |
CVE-2023-3262 | Medium | 6.7 | 2023-08-14 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal Postgres database… |
CVE-2022-46658 | Medium | 6.5 | 2023-05-22 | The affected product is vulnerable to a stack-based buffer overflow which could lead to a denial of service or remote code execution. |
CVE-2022-4945 | Medium | 6.5 | 2023-05-22 | The Dataprobe cloud usernames and passwords are stored in plain text in a specific file. Any user able to read this specific file from the device could comprom… |