Vulnerabilities > Cyberpower > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-08-14 | CVE-2023-3267 | OS Command Injection vulnerability in Cyberpower Powerpanel Server When adding a remote backup location, an authenticated user can pass arbitrary OS commands through the username field. | 8.8 |
| 2023-08-14 | CVE-2023-3260 | OS Command Injection vulnerability in multiple products The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parameter. | 8.8 |
| 2023-08-14 | CVE-2023-3261 | OS Command Injection vulnerability in multiple products The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful exploitation could cause denial of service or unexpected behavior with respect to all interactions relying on the targeted vulnerable binary, including the ability to log in via the web server. | 7.2 |