CVE:CVE-2023-3260
CNNVD:CNNVD-202308-1178
Dataprobe是美国Dataprobe公司的一系列智能电源开关和管理产品。
Dataprobe iBoot PDU 1.43.03312023 及之前版本存在操作系统命令注入漏洞，该漏洞源于容易通过user-name URL 参数进行命令注入的攻击，攻击者利用该漏洞可以在底层 Linux 操作系统上执行任意命令。
solution:Upgrade cyberpower powerpanel_server to a higher version than 2.6.9,and avoid the version (,2.6.9); Upgrade dataprobe iboot-pdu4a-c10_firmware to a higher version than 1.44.0804202,and avoid the version (,1.44.0804202); Upgrade dataprobe iboot-pdu4a-c20_firmware to a higher version than 1.44.0804202,and avoid the version (,1.44.0804202); Upgrade dataprobe iboot-pdu4a-n15_firmware to a higher version than 1.44.0804202,and avoid the version (,1.44.0804202); Upgrade dataprobe iboot-pdu4a-n20_firmware to a higher version than 1.44.0804202,and avoid the version (,1.44.0804202); Upgrade dataprobe iboot-pdu4-c20_firmware to a higher version than 1.44.0804202,and avoid the version (,1.44.0804202); Upgrade dataprobe iboot-pdu4-n20_firmware to a higher version than 1.44.0804202,and avoid the version (,1.44.0804202); Upgrade dataprobe iboot-pdu4sa-c10_firmware to a higher version than 1.44.0804202,and avoid the version (,1.44.0804202); Upgrade dataprobe iboot-pdu4sa-c20_firmware to a higher version than 1.44.0804202,and avoid the version (,1.44.0804202); Upgrade dataprobe iboot-pdu4sa-n15_firmware to a higher version than 1.44.0804202,and avoid the version (,1.44.0804202); Upgrade dataprobe iboot-pdu4sa-n20_firmware to a higher version than 1.44.0804202,and avoid the version (,1.44.0804202); Upgrade dataprobe iboot-pdu8a-2c10_firmware to a higher version than 1.44.0804202,and avoid the version (,1.44.0804202); Upgrade dataprobe iboot-pdu8a-2c20_firmware to a higher version than 1.44.0804202,and avoid the version (,1.44.0804202); Upgrade dataprobe iboot-pdu8a-2n15_firmware to a higher version than 1.44.0804202,and avoid the version (,1.44.0804202); Upgrade dataprobe iboot-pdu8a-2n20_firmware to a higher version than 1.44.0804202,and avoid the version (,1.44.0804202); Upgrade dataprobe iboot-pdu8a-c10_firmware to a higher version than 1.44.0804202,and avoid the version (,1.44.0804202); Upgrade dataprobe iboot-pdu8a-c20_firmware to a higher version than 1.44.0804202,and avoid the version (,1.44.0804202); Upgrade dataprobe iboot-pdu8a-n15_firmware to a higher version than 1.44.0804202,and avoid the version (,1.44.0804202); Upgrade dataprobe iboot-pdu8a-n20_firmware to a higher version than 1.44.0804202,and avoid the version (,1.44.0804202); Upgrade dataprobe iboot-pdu8sa-2n15_firmware to a higher version than 1.44.0804202,and avoid the version (,1.44.0804202); Upgrade dataprobe iboot-pdu8sa-c10_firmware to a higher version than 1.44.0804202,and avoid the version (,1.44.0804202); Upgrade dataprobe iboot-pdu8sa-n15_firmware to a higher version than 1.44.0804202,and avoid the version (,1.44.0804202); Upgrade dataprobe iboot-pdu8sa-n20_firmware to a higher version than 1.44.0804202,and avoid the version (,1.44.0804202)