CVE-2023-3263 - CVE House
Back to Database
Status published High CVE-2023-3263

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier...

Vulnerability Description

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass in the REST API due to the mishandling of special characters when parsing credentials.Successful exploitation allows the malicious agent to obtain a valid authorization token and read information relating to the state of the relays and power distribution.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-3263

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Sam Quinn

References

More from Dataprobe

View All →
CVE-2023-3264
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier...
Medium 6.7
CVE-2023-3262
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier...
Medium 6.7
CVE-2023-3261
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier...
High 7.5
CVE-2023-3260
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier...
High 7.2
CVE-2023-3259
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier...
Critical 9.8

Affected Vendor

Affected Software

iBoot PDU
Vulnerable Versions:
1.43.03312023

Timeline

Official Publish: August 14th, 2023
Last Modified: October 9th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-289

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.