Dataprobe
Dataprobe Iboot-pdu8a-2n15 Firmware: vulnerabilidades y CVE
Dataprobe Iboot-pdu8a-2n15 Firmware tiene 18 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 6 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE18
Últimos 12 meses0
Críticas6
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-3264 | Crítica (9.8) | 0.47% | — | 14 ago 2023 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal Postgres database. A malicious agent with the ability to execute operating… |
| CVE-2023-3263 | Alta (7.5) | 0.69% | — | 14 ago 2023 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass in the REST API due to the mishandling of special characters when parsing credentials.Successful… |
| CVE-2023-3262 | Media (6.7) | 0.30% | — | 14 ago 2023 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal Postgres database.A malicious agent with the ability to execute operating… |
| CVE-2023-3261 | Alta (7.2) | 0.78% | — | 14 ago 2023 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful exploitation could cause denial of service or unexpected… |
| CVE-2023-3260 | Alta (8.8) | 1.3% | — | 14 ago 2023 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parameter. An authenticated malicious agent can exploit this vulnerability to execute… |
| CVE-2023-3259 | Crítica (9.8) | 0.95% | — | 14 ago 2023 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass. By manipulating the IP address field in the "iBootPduSiteAuth" cookie, a malicious agent can direct the… |
| CVE-2022-47320 | Alta (8.1) | 0.51% | — | 22 may 2023 | The iBoot device’s basic discovery protocol assists in initial device configuration. The discovery protocol shows basic information about devices on the network and allows users to perform configuration changes. |
| CVE-2022-47311 | Alta (8.8) | 0.52% | — | 22 may 2023 | A proprietary protocol for iBoot devices is used for control and keepalive commands. The function compares the username and password; it also contains the configuration data for the user specified. If the user does not… |
| CVE-2022-46738 | Crítica (9.8) | 0.58% | — | 22 may 2023 | The affected product exposes multiple sensitive data fields of the affected product. An attacker can use the SNMP command to get device mac address and login as admin. |
| CVE-2022-46658 | Crítica (9.8) | 1.2% | — | 22 may 2023 | The affected product is vulnerable to a stack-based buffer overflow which could lead to a denial of service or remote code execution. |
| CVE-2022-4945 | Media (6.5) | 0.17% | — | 22 may 2023 | The Dataprobe cloud usernames and passwords are stored in plain text in a specific file. Any user able to read this specific file from the device could compromise other devices connected to the user's cloud. |
| CVE-2022-3189 | Media (5.3) | 0.50% | — | 21 dic 2022 | Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specially crafted PHP script could use parameters from a HTTP request to create a URL capable of changing the host parameter. The… |
| CVE-2022-3188 | Media (5.3) | 0.53% | — | 21 dic 2022 | Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where unauthenticated users could open PHP index pages without authentication and download the history file from the device; the history… |
| CVE-2022-3187 | Media (5.3) | 0.46% | — | 21 dic 2022 | Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where certain PHP pages only validate when a valid connection is established with the database. However, these PHP pages do not verify the… |
| CVE-2022-3186 | Alta (7.5) | 0.59% | — | 21 dic 2022 | Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected product allows an attacker to access the device’s main management page from the cloud. This feature enables users to… |
| CVE-2022-3185 | Media (5.3) | 0.49% | — | 21 dic 2022 | Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected product exposes sensitive data concerning the device. |
| CVE-2022-3184 | Crítica (9.8) | 12% | — | 21 dic 2022 | Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the device’s existing firmware allows unauthenticated users to access an old PHP page vulnerable to directory traversal, which may… |
| CVE-2022-3183 | Crítica (9.8) | 1.6% | — | 21 dic 2022 | Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specific function does not sanitize the input provided by the user, which may expose the affected to an OS command injection… |
Otros productos de Dataprobe
Iboot-pdu4-n20 Firmware · 18Iboot-pdu8a-2n20 Firmware · 18Iboot-pdu4a-n15 Firmware · 18Iboot-pdu4sa-n15 Firmware · 18Iboot-pdu8a-n15 Firmware · 18Iboot-pdu8a-n20 Firmware · 18Iboot-pdu8sa-2n15 Firmware · 18Iboot-pdu4sa-n20 Firmware · 18Iboot-pdu8sa-n15 Firmware · 18Iboot-pdu8sa-n20 Firmware · 18Iboot-pdu4a-n20 Firmware · 18Iboot-pdu4-c20 Firmware · 11