The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal Postgres database. A malicious agent with the ability to execute operating system commands on the device can leverage this vulnerability to read, modify, or delete arbitrary database records.
Metrics
Affected Vendors & Products
References
History
Wed, 09 Oct 2024 15:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|

Status: PUBLISHED
Assigner: trellix
Published:
Updated: 2024-10-09T14:40:56.865Z
Reserved: 2023-06-15T06:50:29.804Z
Link: CVE-2023-3264

Updated: 2024-08-02T06:48:08.569Z

Status : Modified
Published: 2023-08-14T05:15:09.910
Modified: 2024-11-21T08:16:49.760
Link: CVE-2023-3264

No data.

No data.