Read the docs
TI-2023-03052 Aliases CVE-2023-3259GHSA-qxx8-22p6-c299

Deserialization of untrusted data in Dataprobe iBoot PDU

Priority MEDIUM 51CWE-502Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-502.

Summary

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass. By manipulating the IP address field in the "iBootPduSiteAuth" cookie, a malicious agent can direct the device to connect to a rouge database.Successful exploitation allows the malicious agent to take actions with administrator privileges including, but not limited to, manipulating power levels, modifying user accounts, and exporting confidential user information

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00951 61st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
DataprobeiBoot PDU1.43.03312023 – <= 1.43.03312023—No fix listedCNA
  • iBoot PDU VendorDataprobe Affected 1.43.03312023 – <= 1.43.03312023 Fixed in — No fix listed CNA

CPE configurations NVD · 44

CPEVersionsRoleVendor
cpe:2.3:o:dataprobe:iboot-pdu4a-c10_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu4a-c10:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu4a-c20_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu4a-c20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu4a-n15_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu4a-n15:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu4a-n20_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu4a-n20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu4-c20_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu4-c20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu4a-c10_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu4a-c10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu4a-c20_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu4a-c20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu4a-n15_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu4a-n15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu4a-n20_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu4a-n20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu4-c20_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu4-c20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
Show 34 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:dataprobe:iboot-pdu4-n20_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu4-n20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu4sa-c10_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu4sa-c10:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu4sa-c20_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu4sa-c20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu4sa-n15_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu4sa-n15:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu4sa-n20_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu4sa-n20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8a-2c10_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8a-2c10:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8a-2c20_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8a-2c20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8a-2n15_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8a-2n15:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8a-2n20_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8a-2n20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8a-c10_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8a-c10:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8a-c20_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8a-c20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8a-n15_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8a-n15:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8a-n20_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8a-n20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8sa-2n15_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8sa-2n15:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8sa-c10_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8sa-c10:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8sa-n15_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8sa-n15:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8sa-n20_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8sa-n20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu4-n20_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu4-n20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu4sa-c10_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu4sa-c10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu4sa-c20_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu4sa-c20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu4sa-n15_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu4sa-n15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu4sa-n20_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu4sa-n20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8a-2c10_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8a-2c10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8a-2c20_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8a-2c20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8a-2n15_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8a-2n15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8a-2n20_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8a-2n20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8a-c10_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8a-c10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8a-c20_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8a-c20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8a-n15_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8a-n15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8a-n20_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8a-n20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8sa-2n15_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8sa-2n15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8sa-c10_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8sa-c10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8sa-n15_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8sa-n15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8sa-n20_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8sa-n20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-3259
  2. 2026-10-03 Alias added: GHSA-qxx8-22p6-c299

References

Advisory 1

  • TI-2022-23113 The affected product exposes multiple sensitive data fields of the affected product. CVSS 3.1CRITICAL 9.8
  • TI-2022-23060 The affected product is vulnerable to a stack-based buffer overflow which could lead to a… CVSS 3.1CRITICAL 9.8
  • TI-2023-03057 Hard-coded credentials in Dataprobe iBoot PDU CVSS 3.1CRITICAL 9.8
  • TI-2023-03053 OS command injection in Dataprobe iBoot PDU CVSS 3.1HIGH 8.8
  • TI-2023-03056 Improper authentication in Dataprobe iBoot PDU CVSS 3.1HIGH 7.5
  • TI-2023-03054 Memory corruption in Dataprobe iBoot PDU CVSS 3.1HIGH 7.5
See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences