High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-08-14	CVE-2023-3267	OS Command Injection vulnerability in Cyberpower Powerpanel Server When adding a remote backup location, an authenticated user can pass arbitrary OS commands through the username field. network low complexity cyberpower CWE-78	8.8
2023-08-14	CVE-2023-3260	OS Command Injection vulnerability in multiple products The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parameter. network low complexity cyberpower dataprobe CWE-78	8.8
2023-08-14	CVE-2023-3261	OS Command Injection vulnerability in multiple products The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful exploitation could cause denial of service or unexpected behavior with respect to all interactions relying on the targeted vulnerable binary, including the ability to log in via the web server. network low complexity cyberpower dataprobe CWE-78	7.2