IF
Product
Iboot-pdu8a-2n20 Firmware
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 6Medium 6Low 0
Watch
Add Iboot-pdu8a-2n20 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-3264 | 9.8 | Aug 14 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal Postgres database. A malicious agent… Affected: before 1.44.0804202 |
| CVE-2023-3259 | 9.8 | Aug 14 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass Affected: before 1.44.0804202 |
| CVE-2022-46658 | 9.8 | May 22 | No description published yet Affected: before 1.42.06162022 |
| CVE-2022-46738 | 9.8 | May 22 | No description published yet Affected: before 1.42.06162022 |
| CVE-2022-3184 | 9.8 | Dec 21 | Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the device’s existing firmware allows unauthenticated users to access an old PHP page… Affected: before 1.42.06162022 |
| CVE-2022-3183 | 9.8 | Dec 21 | Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specific function does not sanitize the input provided by the user, which may expose the… Affected: before 1.42.06162022 |
| CVE-2023-3260 | 8.8 | Aug 14 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parameter Affected: before 1.44.0804202 |
| CVE-2022-47311 | 8.8 | May 22 | No description published yet Affected: before 1.42.06162022 |
| CVE-2022-47320 | 8.1 | May 22 | No description published yet Affected: before 1.42.06162022 |
| CVE-2023-3263 | 7.5 | Aug 14 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass in the REST API due to the mishandling of special characters when… Affected: before 1.44.0804202 |
| CVE-2022-3186 | 7.5 | Dec 21 | Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected product allows an attacker to access the device’s main management page from the… Affected: before 1.42.06162022 |
| CVE-2023-3261 | 7.2 | Aug 14 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful exploitation could… Affected: before 1.44.0804202 |
| CVE-2023-3262 | 6.7 | Aug 14 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal Postgres database.A malicious agent… Affected: before 1.44.0804202 |
| CVE-2022-4945 | 6.5 | May 22 | No description published yet Affected: before 1.42.06162022 |
| CVE-2022-3189 | 5.3 | Dec 21 | Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specially crafted PHP script could use parameters from a HTTP request to create a URL… Affected: before 1.42.06162022 |
| CVE-2022-3188 | 5.3 | Dec 21 | Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where unauthenticated users could open PHP index pages without authentication and download the… Affected: before 1.42.06162022 |
| CVE-2022-3187 | 5.3 | Dec 21 | Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where certain PHP pages only validate when a valid connection is established with the database Affected: before 1.42.06162022 |
| CVE-2022-3185 | 5.3 | Dec 21 | Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected product exposes sensitive data concerning the device Affected: before 1.42.06162022 |
Showing 18