CVE-2023-3259

Summary

CVE-2023-3259 is a vulnerability affecting the Dataprobe iBoot PDU with firmware version 1.43.03312023 or earlier. Hackers can exploit this issue by manipulating the IP address field in the "iBootPduSiteAuth" cookie, enabling them to connect to a rogue database. This bypasses the authentication process, granting the attacker administrator privileges. Potential actions include power level manipulation, user account modification, and confidential user information exportation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.