High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-08-14	CVE-2023-3263	Improper Authentication vulnerability in Dataprobe products The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass in the REST API due to the mishandling of special characters when parsing credentials.Successful exploitation allows the malicious agent to obtain a valid authorization token and read information relating to the state of the relays and power distribution. network low complexity dataprobe CWE-287	7.5
2023-08-14	CVE-2023-3260	OS Command Injection vulnerability in multiple products The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parameter. network low complexity cyberpower dataprobe CWE-78	8.8
2023-08-14	CVE-2023-3261	OS Command Injection vulnerability in multiple products The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful exploitation could cause denial of service or unexpected behavior with respect to all interactions relying on the targeted vulnerable binary, including the ability to log in via the web server. network low complexity cyberpower dataprobe CWE-78	7.2
2023-05-22	CVE-2022-47311	Unspecified vulnerability in Dataprobe products A proprietary protocol for iBoot devices is used for control and keepalive commands. network low complexity dataprobe	8.8
2023-05-22	CVE-2022-47320	Unspecified vulnerability in Dataprobe products The iBoot device’s basic discovery protocol assists in initial device configuration. network low complexity dataprobe	8.1
2022-12-21	CVE-2022-3186	Unspecified vulnerability in Dataprobe products Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected product allows an attacker to access the device’s main management page from the cloud. network low complexity dataprobe	7.5