VULNERABILITY INTELLIGENCE
CVE-2023-3261
CVSS score7.5 HIGH
EPSS probability0.78%
CISA KEVNot currently listed
Published2023-08-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful exploitation could cause denial of service or unexpected behavior with respect to all interactions relying on the targeted vulnerable binary, including the ability to log in via the web server.
Weakness classification
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Primary references
- trellixpsirt@trellix.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory