Dataprobe vulnerabilities
13 published CVEs name Dataprobe among the affected products.
- Published CVEs
- 13
- Last 12 months
- 0
- Critical
- 3
- Known exploited
- 0
Critical 3High 4Medium 6Low 0Not scored 0
CVEs per yearBy the year they were published
- 20227
- 20236
Newest CVEs
- CVE-2023-3264
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal Postgres database.…
Dataprobe · iBoot PDU
Medium6.7 - CVE-2023-3263
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass in the REST API due to the mishandling of…
Dataprobe · iBoot PDU
High7.5 - CVE-2023-3262
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal Postgres…
Dataprobe · iBoot PDU
Medium6.7 - CVE-2023-3261
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful…
Dataprobe · iBoot PDU
High7.5 - CVE-2023-3260
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parameter. An…
Dataprobe · iBoot PDU
High7.2 - CVE-2023-3259
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass. By manipulating the IP address field in the…
Dataprobe · iBoot PDU
Critical9.8 - CVE-2022-3189
Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specially crafted PHP script could use parameters from a HTTP request to…
Dataprobe · iBoot-PDU FW
Medium5.3 - CVE-2022-3188
Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where unauthenticated users could open PHP index pages without authentication…
Dataprobe · iBoot-PDU FW
Medium5.3 - CVE-2022-3187
Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where certain PHP pages only validate when a valid connection is established…
Dataprobe · iBoot-PDU FW
Medium5.3 - CVE-2022-3186
Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected product allows an attacker to access the device’s main…
Dataprobe · iBoot-PDU FW
High8.6
Products with the most CVEs
Most common weaknesses
- CWE-78 OS command injection3
- CWE-798 Hard-coded credentials2
- CWE-119 Memory buffer bounds error1
- CWE-200 Exposure of sensitive information1
- CWE-22 Path traversal1
- CWE-284 Improper access control1
- CWE-285 Improper authorization1
- CWE-287 Improper authentication1
- CWE-289 1
- CWE-306 Missing authentication for a critical function1