// For flags

CVE-2023-3263

 

Severity Score

7.5
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

Attend
*SSVC
Descriptions

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass in the REST API due to the mishandling of special characters when parsing credentials.Successful exploitation allows the malicious agent to obtain a valid authorization token and read information relating to the state of the relays and power distribution.

*Credits: Sam Quinn
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:Attend
Exploitation
None
Automatable
Yes
Tech. Impact
Partial
* Organization's Worst-case Scenario
Timeline
  • 2023-06-15 CVE Reserved
  • 2023-08-14 CVE Published
  • 2024-08-20 EPSS Updated
  • 2024-10-09 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-287: Improper Authentication
  • CWE-289: Authentication Bypass by Alternate Name
CAPEC
  • CAPEC-421: Influence Perception of Authority
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Dataprobe
Search vendor "Dataprobe"
Iboot-pdu4a-c10 Firmware
Search vendor "Dataprobe" for product "Iboot-pdu4a-c10 Firmware"
< 1.44.0804202
Search vendor "Dataprobe" for product "Iboot-pdu4a-c10 Firmware" and version " < 1.44.0804202"
-
Affected
in Dataprobe
Search vendor "Dataprobe"
Iboot-pdu4a-c10
Search vendor "Dataprobe" for product "Iboot-pdu4a-c10"
--
Safe
Dataprobe
Search vendor "Dataprobe"
Iboot-pdu4a-c20 Firmware
Search vendor "Dataprobe" for product "Iboot-pdu4a-c20 Firmware"
< 1.44.0804202
Search vendor "Dataprobe" for product "Iboot-pdu4a-c20 Firmware" and version " < 1.44.0804202"
-
Affected
in Dataprobe
Search vendor "Dataprobe"
Iboot-pdu4a-c20
Search vendor "Dataprobe" for product "Iboot-pdu4a-c20"
--
Safe
Dataprobe
Search vendor "Dataprobe"
Iboot-pdu4a-n15 Firmware
Search vendor "Dataprobe" for product "Iboot-pdu4a-n15 Firmware"
< 1.44.0804202
Search vendor "Dataprobe" for product "Iboot-pdu4a-n15 Firmware" and version " < 1.44.0804202"
-
Affected
in Dataprobe
Search vendor "Dataprobe"
Iboot-pdu4a-n15
Search vendor "Dataprobe" for product "Iboot-pdu4a-n15"
--
Safe
Dataprobe
Search vendor "Dataprobe"
Iboot-pdu4a-n20 Firmware
Search vendor "Dataprobe" for product "Iboot-pdu4a-n20 Firmware"
< 1.44.0804202
Search vendor "Dataprobe" for product "Iboot-pdu4a-n20 Firmware" and version " < 1.44.0804202"
-
Affected
in Dataprobe
Search vendor "Dataprobe"
Iboot-pdu4a-n20
Search vendor "Dataprobe" for product "Iboot-pdu4a-n20"
--
Safe
Dataprobe
Search vendor "Dataprobe"
Iboot-pdu4-c20 Firmware
Search vendor "Dataprobe" for product "Iboot-pdu4-c20 Firmware"
< 1.44.0804202
Search vendor "Dataprobe" for product "Iboot-pdu4-c20 Firmware" and version " < 1.44.0804202"
-
Affected
in Dataprobe
Search vendor "Dataprobe"
Iboot-pdu4-c20
Search vendor "Dataprobe" for product "Iboot-pdu4-c20"
--
Safe
Dataprobe
Search vendor "Dataprobe"
Iboot-pdu4-n20 Firmware
Search vendor "Dataprobe" for product "Iboot-pdu4-n20 Firmware"
< 1.44.0804202
Search vendor "Dataprobe" for product "Iboot-pdu4-n20 Firmware" and version " < 1.44.0804202"
-
Affected
in Dataprobe
Search vendor "Dataprobe"
Iboot-pdu4-n20
Search vendor "Dataprobe" for product "Iboot-pdu4-n20"
--
Safe
Dataprobe
Search vendor "Dataprobe"
Iboot-pdu4sa-c10 Firmware
Search vendor "Dataprobe" for product "Iboot-pdu4sa-c10 Firmware"
< 1.44.0804202
Search vendor "Dataprobe" for product "Iboot-pdu4sa-c10 Firmware" and version " < 1.44.0804202"
-
Affected
in Dataprobe
Search vendor "Dataprobe"
Iboot-pdu4sa-c10
Search vendor "Dataprobe" for product "Iboot-pdu4sa-c10"
--
Safe
Dataprobe
Search vendor "Dataprobe"
Iboot-pdu4sa-c20 Firmware
Search vendor "Dataprobe" for product "Iboot-pdu4sa-c20 Firmware"
< 1.44.0804202
Search vendor "Dataprobe" for product "Iboot-pdu4sa-c20 Firmware" and version " < 1.44.0804202"
-
Affected
in Dataprobe
Search vendor "Dataprobe"
Iboot-pdu4sa-c20
Search vendor "Dataprobe" for product "Iboot-pdu4sa-c20"
--
Safe
Dataprobe
Search vendor "Dataprobe"
Iboot-pdu4sa-n15 Firmware
Search vendor "Dataprobe" for product "Iboot-pdu4sa-n15 Firmware"
< 1.44.0804202
Search vendor "Dataprobe" for product "Iboot-pdu4sa-n15 Firmware" and version " < 1.44.0804202"
-
Affected
in Dataprobe
Search vendor "Dataprobe"
Iboot-pdu4sa-n15
Search vendor "Dataprobe" for product "Iboot-pdu4sa-n15"
--
Safe
Dataprobe
Search vendor "Dataprobe"
Iboot-pdu4sa-n20 Firmware
Search vendor "Dataprobe" for product "Iboot-pdu4sa-n20 Firmware"
< 1.44.0804202
Search vendor "Dataprobe" for product "Iboot-pdu4sa-n20 Firmware" and version " < 1.44.0804202"
-
Affected
in Dataprobe
Search vendor "Dataprobe"
Iboot-pdu4sa-n20
Search vendor "Dataprobe" for product "Iboot-pdu4sa-n20"
--
Safe
Dataprobe
Search vendor "Dataprobe"
Iboot-pdu8a-2c10 Firmware
Search vendor "Dataprobe" for product "Iboot-pdu8a-2c10 Firmware"
< 1.44.0804202
Search vendor "Dataprobe" for product "Iboot-pdu8a-2c10 Firmware" and version " < 1.44.0804202"
-
Affected
in Dataprobe
Search vendor "Dataprobe"
Iboot-pdu8a-2c10
Search vendor "Dataprobe" for product "Iboot-pdu8a-2c10"
--
Safe
Dataprobe
Search vendor "Dataprobe"
Iboot-pdu8a-2c20 Firmware
Search vendor "Dataprobe" for product "Iboot-pdu8a-2c20 Firmware"
< 1.44.0804202
Search vendor "Dataprobe" for product "Iboot-pdu8a-2c20 Firmware" and version " < 1.44.0804202"
-
Affected
in Dataprobe
Search vendor "Dataprobe"
Iboot-pdu8a-2c20
Search vendor "Dataprobe" for product "Iboot-pdu8a-2c20"
--
Safe
Dataprobe
Search vendor "Dataprobe"
Iboot-pdu8a-2n15 Firmware
Search vendor "Dataprobe" for product "Iboot-pdu8a-2n15 Firmware"
< 1.44.0804202
Search vendor "Dataprobe" for product "Iboot-pdu8a-2n15 Firmware" and version " < 1.44.0804202"
-
Affected
in Dataprobe
Search vendor "Dataprobe"
Iboot-pdu8a-2n15
Search vendor "Dataprobe" for product "Iboot-pdu8a-2n15"
--
Safe
Dataprobe
Search vendor "Dataprobe"
Iboot-pdu8a-2n20 Firmware
Search vendor "Dataprobe" for product "Iboot-pdu8a-2n20 Firmware"
< 1.44.0804202
Search vendor "Dataprobe" for product "Iboot-pdu8a-2n20 Firmware" and version " < 1.44.0804202"
-
Affected
in Dataprobe
Search vendor "Dataprobe"
Iboot-pdu8a-2n20
Search vendor "Dataprobe" for product "Iboot-pdu8a-2n20"
--
Safe
Dataprobe
Search vendor "Dataprobe"
Iboot-pdu8a-c10 Firmware
Search vendor "Dataprobe" for product "Iboot-pdu8a-c10 Firmware"
< 1.44.0804202
Search vendor "Dataprobe" for product "Iboot-pdu8a-c10 Firmware" and version " < 1.44.0804202"
-
Affected
in Dataprobe
Search vendor "Dataprobe"
Iboot-pdu8a-c10
Search vendor "Dataprobe" for product "Iboot-pdu8a-c10"
--
Safe
Dataprobe
Search vendor "Dataprobe"
Iboot-pdu8a-c20 Firmware
Search vendor "Dataprobe" for product "Iboot-pdu8a-c20 Firmware"
< 1.44.0804202
Search vendor "Dataprobe" for product "Iboot-pdu8a-c20 Firmware" and version " < 1.44.0804202"
-
Affected
in Dataprobe
Search vendor "Dataprobe"
Iboot-pdu8a-c20
Search vendor "Dataprobe" for product "Iboot-pdu8a-c20"
--
Safe
Dataprobe
Search vendor "Dataprobe"
Iboot-pdu8a-n15 Firmware
Search vendor "Dataprobe" for product "Iboot-pdu8a-n15 Firmware"
< 1.44.0804202
Search vendor "Dataprobe" for product "Iboot-pdu8a-n15 Firmware" and version " < 1.44.0804202"
-
Affected
in Dataprobe
Search vendor "Dataprobe"
Iboot-pdu8a-n15
Search vendor "Dataprobe" for product "Iboot-pdu8a-n15"
--
Safe
Dataprobe
Search vendor "Dataprobe"
Iboot-pdu8a-n20 Firmware
Search vendor "Dataprobe" for product "Iboot-pdu8a-n20 Firmware"
< 1.44.0804202
Search vendor "Dataprobe" for product "Iboot-pdu8a-n20 Firmware" and version " < 1.44.0804202"
-
Affected
in Dataprobe
Search vendor "Dataprobe"
Iboot-pdu8a-n20
Search vendor "Dataprobe" for product "Iboot-pdu8a-n20"
--
Safe
Dataprobe
Search vendor "Dataprobe"
Iboot-pdu8sa-2n15 Firmware
Search vendor "Dataprobe" for product "Iboot-pdu8sa-2n15 Firmware"
< 1.44.0804202
Search vendor "Dataprobe" for product "Iboot-pdu8sa-2n15 Firmware" and version " < 1.44.0804202"
-
Affected
in Dataprobe
Search vendor "Dataprobe"
Iboot-pdu8sa-2n15
Search vendor "Dataprobe" for product "Iboot-pdu8sa-2n15"
--
Safe
Dataprobe
Search vendor "Dataprobe"
Iboot-pdu8sa-c10 Firmware
Search vendor "Dataprobe" for product "Iboot-pdu8sa-c10 Firmware"
< 1.44.0804202
Search vendor "Dataprobe" for product "Iboot-pdu8sa-c10 Firmware" and version " < 1.44.0804202"
-
Affected
in Dataprobe
Search vendor "Dataprobe"
Iboot-pdu8sa-c10
Search vendor "Dataprobe" for product "Iboot-pdu8sa-c10"
--
Safe
Dataprobe
Search vendor "Dataprobe"
Iboot-pdu8sa-n15 Firmware
Search vendor "Dataprobe" for product "Iboot-pdu8sa-n15 Firmware"
< 1.44.0804202
Search vendor "Dataprobe" for product "Iboot-pdu8sa-n15 Firmware" and version " < 1.44.0804202"
-
Affected
in Dataprobe
Search vendor "Dataprobe"
Iboot-pdu8sa-n15
Search vendor "Dataprobe" for product "Iboot-pdu8sa-n15"
--
Safe
Dataprobe
Search vendor "Dataprobe"
Iboot-pdu8sa-n20 Firmware
Search vendor "Dataprobe" for product "Iboot-pdu8sa-n20 Firmware"
< 1.44.0804202
Search vendor "Dataprobe" for product "Iboot-pdu8sa-n20 Firmware" and version " < 1.44.0804202"
-
Affected
in Dataprobe
Search vendor "Dataprobe"
Iboot-pdu8sa-n20
Search vendor "Dataprobe" for product "Iboot-pdu8sa-n20"
--
Safe