1. Home
  2. CVE Database
  3. CVE-2023-3263
HIGH · 7.5

CVE-2023-3263

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass in the REST API due to the mishandling of special characters when parsing credentials.S...

Vulnerability Description

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass in the REST API due to the mishandling of special characters when parsing credentials.Successful exploitation allows the malicious agent to obtain a valid authorization token and read information relating to the state of the relays and power distribution.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
DataprobeIboot-Pdu4A-C10 Firmware< 1.44.0804202
DataprobeIboot-Pdu4A-C10-
DataprobeIboot-Pdu4A-C20 Firmware< 1.44.0804202
DataprobeIboot-Pdu4A-C20-
DataprobeIboot-Pdu4A-N15 Firmware< 1.44.0804202
DataprobeIboot-Pdu4A-N15-
DataprobeIboot-Pdu4A-N20 Firmware< 1.44.0804202
DataprobeIboot-Pdu4A-N20-
DataprobeIboot-Pdu4-C20 Firmware< 1.44.0804202
DataprobeIboot-Pdu4-C20-
DataprobeIboot-Pdu4-N20 Firmware< 1.44.0804202
DataprobeIboot-Pdu4-N20-
DataprobeIboot-Pdu4Sa-C10 Firmware< 1.44.0804202
DataprobeIboot-Pdu4Sa-C10-
DataprobeIboot-Pdu4Sa-C20 Firmware< 1.44.0804202
DataprobeIboot-Pdu4Sa-C20-
DataprobeIboot-Pdu4Sa-N15 Firmware< 1.44.0804202
DataprobeIboot-Pdu4Sa-N15-
DataprobeIboot-Pdu4Sa-N20 Firmware< 1.44.0804202
DataprobeIboot-Pdu4Sa-N20-

Related Weaknesses (CWE)

CWE-287CWE-289

References

FAQ

What is CVE-2023-3263?

CVE-2023-3263 is a vulnerability with a CVSS score of 7.5 (HIGH). The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass in the REST API due to the mishandling of special characters when parsing credentials.S...

How severe is CVE-2023-3263?

CVE-2023-3263 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-3263?

Check the references section above for vendor advisories and patch information. Affected products include: Dataprobe Iboot-Pdu4A-C10 Firmware, Dataprobe Iboot-Pdu4A-C10, Dataprobe Iboot-Pdu4A-C20 Firmware, Dataprobe Iboot-Pdu4A-C20, Dataprobe Iboot-Pdu4A-N15 Firmware.