Skip to content
OpenAdvisories
High · 7.2 CVE-2023-3260 EUVD-2023-43936GHSA-xrfp-wpx5-pg4h

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parame…

Published Aug 14, 2023 · Updated Oct 9, 2024 · Assigned by trellix

Vendor: Dataprobe Product: iBoot PDU

Description

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parameter. An authenticated malicious agent can exploit this vulnerability to execute arbitrary command on the underlying Linux operating system.

Affected products

VendorProductAffectedFixed
Dataprobe iBoot PDU 1.43.03312023 – < <= 1.43.03312023 <= 1.43.03312023

References