CVE-2023-3264 (published 2023-08-14T04:05:58.124Z)
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal Postgres database. A malicious agent with the ability to execute operating system commands on the device can leverage this vulnerability to read, modify, or delete arbitrary database records.
Affected products: Vendor: Dataprobe
Product: iBoot PDU
Versions: v2.6.0