Dataprobe - vulnerabilities (CVEs)

20 CVEs in 48 products, 0 in the last 30 days, newest from 2023-08-14.

Products

Newest CVEs of Dataprobe

CVE-2023-3264 - CVSS 9.8 (critical), 2023-08-14: The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal Postgres…
CVE-2023-3263 - CVSS 7.5 (high), 2023-08-14: The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass in the REST API due to the mishandling of…
CVE-2023-3262 - CVSS 6.7 (medium), 2023-08-14: The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal Postgres…
CVE-2023-3259 - CVSS 9.8 (critical), 2023-08-14: The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass. By manipulating the IP address field in the…
CVE-2023-3261 - CVSS 7.5 (high), 2023-08-14: The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful…
CVE-2023-3260 - CVSS 8.8 (high), 2023-08-14: The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parameter. An…
CVE-2022-46738 - CVSS 9.8 (critical), 2023-05-22: The affected product exposes multiple sensitive data fields of the affected product. An attacker can use the SNMP command to get device mac address and login…
CVE-2022-46658 - CVSS 9.8 (critical), 2023-05-22: The affected product is vulnerable to a stack-based buffer overflow which could lead to a denial of service or remote code execution.
CVE-2022-47320 - CVSS 8.1 (high), 2023-05-22: The iBoot device’s basic discovery protocol assists in initial device configuration. The discovery protocol shows basic information about devices on the…
CVE-2022-47311 - CVSS 8.8 (high), 2023-05-22: A proprietary protocol for iBoot devices is used for control and keepalive commands. The function compares the username and password; it also contains the…
CVE-2022-4945 - CVSS 6.5 (medium), 2023-05-22: The Dataprobe cloud usernames and passwords are stored in plain text in a specific file. Any user able to read this specific file from the device could…
CVE-2022-3183 - CVSS 9.8 (critical), 2022-12-21: Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specific function does not sanitize the input provided by the user,…
CVE-2022-3186 - CVSS 8.6 (high), 2022-12-21: Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected product allows an attacker to access the device’s main…
CVE-2022-3189 - CVSS 5.3 (medium), 2022-12-21: Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specially crafted PHP script could use parameters from a HTTP request…
CVE-2022-3185 - CVSS 5.3 (medium), 2022-12-21: Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected product exposes sensitive data concerning the device.
CVE-2022-3188 - CVSS 5.3 (medium), 2022-12-21: Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where unauthenticated users could open PHP index pages without authentication…
CVE-2022-3184 - CVSS 9.8 (critical), 2022-12-21: Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the device’s existing firmware allows unauthenticated users to access an…
CVE-2022-3187 - CVSS 5.3 (medium), 2022-12-21: Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where certain PHP pages only validate when a valid connection is established…
CVE-2007-6759 - CVSS 9.8 (critical), 2017-04-07: Dataprobe iBootBar (with 2007-09-20 and possibly later released firmware) allows remote attackers to bypass authentication, and conduct power-cycle attacks on…
CVE-2007-6760 - CVSS 9.8 (critical), 2017-04-07: Dataprobe iBootBar (with 2007-09-20 and possibly later beta firmware) allows remote attackers to bypass authentication, and conduct power-cycle attacks on…