CVE-2023-3260

Summary

CVE-2023-3260 is a command injection vulnerability affecting the Dataprobe iBoot PDU's firmware version 1.43.03312023 and earlier. An authenticated attacker can exploit this vulnerability by inputting malicious commands through the `user-name` URL parameter. Successful exploitation grants the attacker the ability to execute arbitrary commands on the underlying Linux operating system. This vulnerability poses a significant risk, as it can lead to unauthorized system access and potential data breaches. System administrators are strongly advised to update their iBoot PDUs to the latest firmware version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.