Critical severity9.8NVD Advisory· Published Aug 14, 2023· Updated Jun 17, 2026

CVE-2023-3259

Description

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass. By manipulating the IP address field in the "iBootPduSiteAuth" cookie, a malicious agent can direct the device to connect to a rouge database.Successful exploitation allows the malicious agent to take actions with administrator privileges including, but not limited to, manipulating power levels, modifying user accounts, and exporting confidential user information

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

C Data/Iboot Pdu4 C20 Firmware
cpe:2.3:o:dataprobe:iboot-pdu4-c20_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu4 N20 Firmware
cpe:2.3:o:dataprobe:iboot-pdu4-n20_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu4a C10 Firmware
cpe:2.3:o:dataprobe:iboot-pdu4a-c10_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu4a C20 Firmware
cpe:2.3:o:dataprobe:iboot-pdu4a-c20_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu4a N15 Firmware
cpe:2.3:o:dataprobe:iboot-pdu4a-n15_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu4a N20 Firmware
cpe:2.3:o:dataprobe:iboot-pdu4a-n20_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu4sa C10 Firmware
cpe:2.3:o:dataprobe:iboot-pdu4sa-c10_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu4sa C20 Firmware
cpe:2.3:o:dataprobe:iboot-pdu4sa-c20_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu4sa N15 Firmware
cpe:2.3:o:dataprobe:iboot-pdu4sa-n15_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu4sa N20 Firmware
cpe:2.3:o:dataprobe:iboot-pdu4sa-n20_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu8a 2c10 Firmware
cpe:2.3:o:dataprobe:iboot-pdu8a-2c10_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu8a 2c20 Firmware
cpe:2.3:o:dataprobe:iboot-pdu8a-2c20_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu8a 2n15 Firmware
cpe:2.3:o:dataprobe:iboot-pdu8a-2n15_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu8a 2n20 Firmware
cpe:2.3:o:dataprobe:iboot-pdu8a-2n20_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu8a C10 Firmware
cpe:2.3:o:dataprobe:iboot-pdu8a-c10_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu8a C20 Firmware
cpe:2.3:o:dataprobe:iboot-pdu8a-c20_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu8a N15 Firmware
cpe:2.3:o:dataprobe:iboot-pdu8a-n15_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu8a N20 Firmware
cpe:2.3:o:dataprobe:iboot-pdu8a-n20_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu8sa 2n15 Firmware
cpe:2.3:o:dataprobe:iboot-pdu8sa-2n15_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu8sa C10 Firmware
cpe:2.3:o:dataprobe:iboot-pdu8sa-c10_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu8sa N15 Firmware
cpe:2.3:o:dataprobe:iboot-pdu8sa-n15_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu8sa N20 Firmware
cpe:2.3:o:dataprobe:iboot-pdu8sa-n20_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/iBoot PDUllm-create
Range: <=1.43.03312023
C Data/Iboot Pdu Fwcpe-rescue
Range: 1.43.03312023

Patches

Vulnerability mechanics

References

www.trellix.com/en-us/about/newsroom/stories/research/the-threat-lurking-in-data-centers.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000