CVEvulnerability

CVE-2023-3261

7.2 HIGH Published 2023-08-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-08-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-119, CWE-78

Description

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful exploitation could cause denial of service or unexpected behavior with respect to all interactions relying on the targeted vulnerable binary, including the ability to log in via the web server.

Affected configurations

• cyberpower powerpanel server (< 2.6.9) • dataprobe iboot-pdu4a-c10 firmware (< 1.44.0804202) • dataprobe iboot-pdu4a-c20 firmware (< 1.44.0804202) • dataprobe iboot-pdu4a-n15 firmware (< 1.44.0804202) • dataprobe iboot-pdu4a-n20 firmware (< 1.44.0804202) • dataprobe iboot-pdu4-c20 firmware (< 1.44.0804202) • dataprobe iboot-pdu4-n20 firmware (< 1.44.0804202) • dataprobe iboot-pdu4sa-c10 firmware (< 1.44.0804202) • dataprobe iboot-pdu4sa-c20 firmware (< 1.44.0804202) • dataprobe iboot-pdu4sa-n15 firmware (< 1.44.0804202) • dataprobe iboot-pdu4sa-n20 firmware (< 1.44.0804202) • dataprobe iboot-pdu8a-2c10 firmware (< 1.44.0804202) • dataprobe iboot-pdu8a-2c20 firmware (< 1.44.0804202) • dataprobe iboot-pdu8a-2n15 firmware (< 1.44.0804202) • dataprobe iboot-pdu8a-2n20 firmware (< 1.44.0804202) • dataprobe iboot-pdu8a-c10 firmware (< 1.44.0804202) • dataprobe iboot-pdu8a-c20 firmware (< 1.44.0804202) • dataprobe iboot-pdu8a-n15 firmware (< 1.44.0804202) • dataprobe iboot-pdu8a-n20 firmware (< 1.44.0804202) • dataprobe iboot-pdu8sa-2n15 firmware (< 1.44.0804202) • dataprobe iboot-pdu8sa-c10 firmware (< 1.44.0804202) • dataprobe iboot-pdu8sa-n15 firmware (< 1.44.0804202) • dataprobe iboot-pdu8sa-n20 firmware (< 1.44.0804202)

Related

Weakness · CWE (2)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References