Medium severity6.7NVD Advisory· Published Aug 14, 2023· Updated Jun 17, 2026

CVE-2023-3264

Description

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal Postgres database. A malicious agent with the ability to execute operating system commands on the device can leverage this vulnerability to read, modify, or delete arbitrary database records.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cyberpower/Powerpanel Server
cpe:2.3:a:cyberpower:powerpanel_server:*:*:*:*:enterprise:*:*:*
Range: <2.6.9
C Data/Iboot Pdu4 C20 Firmware
cpe:2.3:o:dataprobe:iboot-pdu4-c20_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu4 N20 Firmware
cpe:2.3:o:dataprobe:iboot-pdu4-n20_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu4a C10 Firmware
cpe:2.3:o:dataprobe:iboot-pdu4a-c10_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu4a C20 Firmware
cpe:2.3:o:dataprobe:iboot-pdu4a-c20_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu4a N15 Firmware
cpe:2.3:o:dataprobe:iboot-pdu4a-n15_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu4a N20 Firmware
cpe:2.3:o:dataprobe:iboot-pdu4a-n20_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu4sa C10 Firmware
cpe:2.3:o:dataprobe:iboot-pdu4sa-c10_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu4sa C20 Firmware
cpe:2.3:o:dataprobe:iboot-pdu4sa-c20_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu4sa N15 Firmware
cpe:2.3:o:dataprobe:iboot-pdu4sa-n15_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu4sa N20 Firmware
cpe:2.3:o:dataprobe:iboot-pdu4sa-n20_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu8a 2c10 Firmware
cpe:2.3:o:dataprobe:iboot-pdu8a-2c10_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu8a 2c20 Firmware
cpe:2.3:o:dataprobe:iboot-pdu8a-2c20_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu8a 2n15 Firmware
cpe:2.3:o:dataprobe:iboot-pdu8a-2n15_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu8a 2n20 Firmware
cpe:2.3:o:dataprobe:iboot-pdu8a-2n20_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu8a C10 Firmware
cpe:2.3:o:dataprobe:iboot-pdu8a-c10_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu8a C20 Firmware
cpe:2.3:o:dataprobe:iboot-pdu8a-c20_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu8a N15 Firmware
cpe:2.3:o:dataprobe:iboot-pdu8a-n15_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu8a N20 Firmware
cpe:2.3:o:dataprobe:iboot-pdu8a-n20_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu8sa 2n15 Firmware
cpe:2.3:o:dataprobe:iboot-pdu8sa-2n15_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu8sa C10 Firmware
cpe:2.3:o:dataprobe:iboot-pdu8sa-c10_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu8sa N15 Firmware
cpe:2.3:o:dataprobe:iboot-pdu8sa-n15_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/Iboot Pdu8sa N20 Firmware
cpe:2.3:o:dataprobe:iboot-pdu8sa-n20_firmware:*:*:*:*:*:*:*:*
Range: <1.44.0804202
C Data/iBoot PDUllm-create
Range: <=1.43.03312023
C Data/Iboot Pdu Fwcpe-rescue
Range: v2.6.0

Patches

Vulnerability mechanics

References

www.trellix.com/en-us/about/newsroom/stories/research/the-threat-lurking-in-data-centers.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.436
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000