CVSS 3.1
8.8 highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2023-3260
High (8.8). EPSS 1.3% chance of exploitation in the next 30 days.
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parameter. An authenticated malicious agent can exploit this vulnerability to execute arbitrary command on the underlying Linux operating system.
Severity
- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
- CWE
- CWE-78
- Published
- Modified
- Record from
- the NVD, synced
Affected
- cyberpower:powerpanel_server
- dataprobe:iboot-pdu4-c20_firmware
- dataprobe:iboot-pdu4-n20_firmware
- dataprobe:iboot-pdu4a-c10_firmware
- dataprobe:iboot-pdu4a-c20_firmware
- dataprobe:iboot-pdu4a-n15_firmware
- dataprobe:iboot-pdu4a-n20_firmware
- dataprobe:iboot-pdu4sa-c10_firmware
- dataprobe:iboot-pdu4sa-c20_firmware
- dataprobe:iboot-pdu4sa-n15_firmware
- dataprobe:iboot-pdu4sa-n20_firmware
- dataprobe:iboot-pdu8a-2c10_firmware
- dataprobe:iboot-pdu8a-2c20_firmware
- dataprobe:iboot-pdu8a-2n15_firmware
- dataprobe:iboot-pdu8a-2n20_firmware
- dataprobe:iboot-pdu8a-c10_firmware
- dataprobe:iboot-pdu8a-c20_firmware
- dataprobe:iboot-pdu8a-n15_firmware
- dataprobe:iboot-pdu8a-n20_firmware
- dataprobe:iboot-pdu8sa-2n15_firmware
- dataprobe:iboot-pdu8sa-c10_firmware
- dataprobe:iboot-pdu8sa-n15_firmware
- dataprobe:iboot-pdu8sa-n20_firmware