CVE-2023-3261

Published: Aug 14, 2023Modified: Jun 17, 2026

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: NVD

Description

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful exploitation could cause denial of service or unexpected behavior with respect to all interactions relying on the targeted vulnerable binary, including the ability to log in via the web server.

Affected (23)

Cyberpower

1 product

Powerpanel Server

Dataprobe

22 products

Iboot Pdu4a C10 Firmware

Iboot Pdu4a C20 Firmware

Iboot Pdu4a N15 Firmware

Iboot Pdu4a N20 Firmware

Iboot Pdu4 C20 Firmware

Iboot Pdu4 N20 Firmware

Iboot Pdu4sa C10 Firmware

Iboot Pdu4sa C20 Firmware

Iboot Pdu4sa N15 Firmware

Iboot Pdu4sa N20 Firmware

Iboot Pdu8a 2c10 Firmware

Iboot Pdu8a 2c20 Firmware

Iboot Pdu8a 2n15 Firmware

Iboot Pdu8a 2n20 Firmware

Iboot Pdu8a C10 Firmware

Iboot Pdu8a C20 Firmware

Iboot Pdu8a N15 Firmware

Iboot Pdu8a N20 Firmware

Iboot Pdu8sa 2n15 Firmware

Iboot Pdu8sa C10 Firmware

Iboot Pdu8sa N15 Firmware

Iboot Pdu8sa N20 Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cyberpower Powerpanel Server	Before 2.6.9

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dataprobe Iboot Pdu4a C10 Firmware	Before 1.44.0804202

Running on/with	Platform Versions
Dataprobe Iboot Pdu4a C10	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dataprobe Iboot Pdu4a C20 Firmware	Before 1.44.0804202

Running on/with	Platform Versions
Dataprobe Iboot Pdu4a C20	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dataprobe Iboot Pdu4a N15 Firmware	Before 1.44.0804202

Running on/with	Platform Versions
Dataprobe Iboot Pdu4a N15	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dataprobe Iboot Pdu4a N20 Firmware	Before 1.44.0804202

Running on/with	Platform Versions
Dataprobe Iboot Pdu4a N20	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dataprobe Iboot Pdu4 C20 Firmware	Before 1.44.0804202

Running on/with	Platform Versions
Dataprobe Iboot Pdu4 C20	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dataprobe Iboot Pdu4 N20 Firmware	Before 1.44.0804202

Running on/with	Platform Versions
Dataprobe Iboot Pdu4 N20	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dataprobe Iboot Pdu4sa C10 Firmware	Before 1.44.0804202

Running on/with	Platform Versions
Dataprobe Iboot Pdu4sa C10	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dataprobe Iboot Pdu4sa C20 Firmware	Before 1.44.0804202

Running on/with	Platform Versions
Dataprobe Iboot Pdu4sa C20	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dataprobe Iboot Pdu4sa N15 Firmware	Before 1.44.0804202

Running on/with	Platform Versions
Dataprobe Iboot Pdu4sa N15	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dataprobe Iboot Pdu4sa N20 Firmware	Before 1.44.0804202

Running on/with	Platform Versions
Dataprobe Iboot Pdu4sa N20	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dataprobe Iboot Pdu8a 2c10 Firmware	Before 1.44.0804202

Running on/with	Platform Versions
Dataprobe Iboot Pdu8a 2c10	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dataprobe Iboot Pdu8a 2c20 Firmware	Before 1.44.0804202

Running on/with	Platform Versions
Dataprobe Iboot Pdu8a 2c20	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dataprobe Iboot Pdu8a 2n15 Firmware	Before 1.44.0804202

Running on/with	Platform Versions
Dataprobe Iboot Pdu8a 2n15	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dataprobe Iboot Pdu8a 2n20 Firmware	Before 1.44.0804202

Running on/with	Platform Versions
Dataprobe Iboot Pdu8a 2n20	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dataprobe Iboot Pdu8a C10 Firmware	Before 1.44.0804202

Running on/with	Platform Versions
Dataprobe Iboot Pdu8a C10	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dataprobe Iboot Pdu8a C20 Firmware	Before 1.44.0804202

Running on/with	Platform Versions
Dataprobe Iboot Pdu8a C20	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dataprobe Iboot Pdu8a N15 Firmware	Before 1.44.0804202

Running on/with	Platform Versions
Dataprobe Iboot Pdu8a N15	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dataprobe Iboot Pdu8a N20 Firmware	Before 1.44.0804202

Running on/with	Platform Versions
Dataprobe Iboot Pdu8a N20	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dataprobe Iboot Pdu8sa 2n15 Firmware	Before 1.44.0804202

Running on/with	Platform Versions
Dataprobe Iboot Pdu8sa 2n15	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dataprobe Iboot Pdu8sa C10 Firmware	Before 1.44.0804202

Running on/with	Platform Versions
Dataprobe Iboot Pdu8sa C10	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dataprobe Iboot Pdu8sa N15 Firmware	Before 1.44.0804202

Running on/with	Platform Versions
Dataprobe Iboot Pdu8sa N15	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dataprobe Iboot Pdu8sa N20 Firmware	Before 1.44.0804202

Running on/with	Platform Versions
Dataprobe Iboot Pdu8sa N20	All versions

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References (2)

https://www.trellix.com/en-us/about/newsroom/stories/research/the-threat-lurking-in-data-centers.html

Source: trellixpsirt@trellix.com

Vendor Advisory

https://www.trellix.com/en-us/about/newsroom/stories/research/the-threat-lurking-in-data-centers.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.