CVE-2023-3260 — Dataprobe / iBoot PDU

CVE-2023-3260

Dataprobe / iBoot PDU PUBLISHED

Description (CNA)

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parameter. An authenticated malicious agent can exploit this vulnerability to execute arbitrary command on the underlying Linux operating system.

Affected (CNA)

Vendor / product	Versions
Dataprobe / iBoot PDU	affected 1.43.03312023 before <= 1.43.03312023

CWE

CWE-78

References

https://www.trellix.com/en-us/about/newsroom/stories/research/the-threat-lurking-in-data-centers.html

ADP enrichment

CVE

No English description supplied.

https://www.trellix.com/en-us/about/newsroom/stories/research/the-threat-lurking-in-data-centers.html

CISA-ADP

No English description supplied.

No references supplied.