TI-2023-03052 CVE-2023-3259 · GHSA-qxx8-22p6-c299
Deserialization of untrusted data in Dataprobe iBoot PDU
Priority MEDIUM 51
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass.
Dataprobe
Records20All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9
Exploited now
Dataprobe records in CISA KEVNo Dataprobe vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
11 records in Iboot-pdu4-c20 Firmware · all components
TI-2022-23113 CVE-2022-46738 · GHSA-w9xj-7xh9-mq78
The affected product exposes multiple sensitive data fields of the affected product.
Priority MEDIUM 49
The affected product exposes multiple sensitive data fields of the affected product.
TI-2022-23060 CVE-2022-46658 · GHSA-wx8f-hp3p-f4v8
The affected product is vulnerable to a stack-based buffer overflow which could lead to a…
Priority MEDIUM 45
The affected product is vulnerable to a stack-based buffer overflow which could lead to a denial of service or remote code execution.
TI-2023-03057 CVE-2023-3264 · GHSA-8x2v-2298-37mj
Hard-coded credentials in Dataprobe iBoot PDU
Priority MEDIUM 43
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal Postgres database.
TI-2023-03053 CVE-2023-3260 · GHSA-xrfp-wpx5-pg4h
OS command injection in Dataprobe iBoot PDU
Priority MEDIUM 43
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parameter.
TI-2023-03056 CVE-2023-3263 · GHSA-hhw8-ppcx-3fjj
Improper authentication in Dataprobe iBoot PDU
Priority MEDIUM 40
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass in the REST API due to the mishandling of special characters when parsing credentials.Successful exploitati…
TI-2023-03054 CVE-2023-3261 · GHSA-2868-gw76-97vq
Memory corruption in Dataprobe iBoot PDU
Priority MEDIUM 40
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful exploitation could cause denial of service or unexpected behavi…
TI-2022-23407 CVE-2022-47311 · GHSA-98hm-c56g-vjqc
A proprietary protocol for iBoot devices is used for control and keepalive commands.
Priority LOW 39
A proprietary protocol for iBoot devices is used for control and keepalive commands.
TI-2022-23410 CVE-2022-47320 · GHSA-9x97-7gh3-f487
The iBoot device’s basic discovery protocol assists in initial device configuration.
Priority LOW 38
The iBoot device’s basic discovery protocol assists in initial device configuration.
TI-2023-03055 CVE-2023-3262 · GHSA-mm74-h4mh-pgw6
Hard-coded credentials in Dataprobe iBoot PDU
Priority LOW 31
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal Postgres database.A malicious agent with the ability to execute operating syste…
TI-2022-04536 CVE-2022-4945 · GHSA-gx4c-qrx5-9w6f
The Dataprobe cloud usernames and passwords are stored in plain text in a specific file.
Priority LOW 28
The Dataprobe cloud usernames and passwords are stored in plain text in a specific file.