Read the docs
TI-2023-03054 Aliases CVE-2023-3261GHSA-2868-gw76-97vq

Memory corruption in Dataprobe iBoot PDU

Priority MEDIUM 40CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service, Code execution
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-119, CWE-78 and the CVSS impact.

Summary

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful exploitation could cause denial of service or unexpected behavior with respect to all interactions relying on the targeted vulnerable binary, including the ability to log in via the web server.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00784 56th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
DataprobeiBoot PDU1.43.03312023 – <= 1.43.03312023—No fix listedCNA
  • iBoot PDU VendorDataprobe Affected 1.43.03312023 – <= 1.43.03312023 Fixed in — No fix listed CNA

CPE configurations NVD · 45

CPEVersionsRoleVendor
cpe:2.3:a:cyberpower:powerpanel_server:*:*:*:*:enterprise:*:*:*before 2.6.9VulnerableCyberPower
cpe:2.3:o:dataprobe:iboot-pdu4a-c10_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu4a-c10:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu4a-c20_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu4a-c20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu4a-n15_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu4a-n15:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu4a-n20_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu4a-n20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu4-c20_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
  • cpe:2.3:a:cyberpower:powerpanel_server:*:*:*:*:enterprise:*:*:* Versions before 2.6.9 Vulnerable ·CyberPower
  • cpe:2.3:o:dataprobe:iboot-pdu4a-c10_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu4a-c10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu4a-c20_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu4a-c20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu4a-n15_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu4a-n15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu4a-n20_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu4a-n20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu4-c20_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
Show 35 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:dataprobe:iboot-pdu4-c20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu4-n20_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu4-n20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu4sa-c10_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu4sa-c10:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu4sa-c20_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu4sa-c20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu4sa-n15_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu4sa-n15:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu4sa-n20_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu4sa-n20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8a-2c10_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8a-2c10:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8a-2c20_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8a-2c20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8a-2n15_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8a-2n15:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8a-2n20_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8a-2n20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8a-c10_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8a-c10:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8a-c20_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8a-c20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8a-n15_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8a-n15:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8a-n20_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8a-n20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8sa-2n15_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8sa-2n15:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8sa-c10_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8sa-c10:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8sa-n15_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8sa-n15:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
cpe:2.3:o:dataprobe:iboot-pdu8sa-n20_firmware:*:*:*:*:*:*:*:*before 1.44.0804202VulnerableDataprobe
cpe:2.3:h:dataprobe:iboot-pdu8sa-n20:-:*:*:*:*:*:*:*not specified by NVDRunning onDataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu4-c20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu4-n20_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu4-n20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu4sa-c10_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu4sa-c10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu4sa-c20_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu4sa-c20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu4sa-n15_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu4sa-n15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu4sa-n20_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu4sa-n20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8a-2c10_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8a-2c10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8a-2c20_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8a-2c20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8a-2n15_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8a-2n15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8a-2n20_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8a-2n20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8a-c10_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8a-c10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8a-c20_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8a-c20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8a-n15_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8a-n15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8a-n20_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8a-n20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8sa-2n15_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8sa-2n15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8sa-c10_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8sa-c10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8sa-n15_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8sa-n15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe
  • cpe:2.3:o:dataprobe:iboot-pdu8sa-n20_firmware:*:*:*:*:*:*:*:* Versions before 1.44.0804202 Vulnerable ·Dataprobe
  • cpe:2.3:h:dataprobe:iboot-pdu8sa-n20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dataprobe

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-3261
  2. 2026-10-03 Alias added: GHSA-2868-gw76-97vq

References

Advisory 1

  • TI-2023-03052 Deserialization of untrusted data in Dataprobe iBoot PDU CVSS 3.1CRITICAL 9.8
  • TI-2022-23113 The affected product exposes multiple sensitive data fields of the affected product. CVSS 3.1CRITICAL 9.8
  • TI-2022-23060 The affected product is vulnerable to a stack-based buffer overflow which could lead to a… CVSS 3.1CRITICAL 9.8
  • TI-2023-03057 Hard-coded credentials in Dataprobe iBoot PDU CVSS 3.1CRITICAL 9.8
  • TI-2023-03053 OS command injection in Dataprobe iBoot PDU CVSS 3.1HIGH 8.8
  • TI-2023-03056 Improper authentication in Dataprobe iBoot PDU CVSS 3.1HIGH 7.5
See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences