CVE-2023-3261
Assigner: trellix
Published: 2023-08-14T03:53:59.429Z
State: PUBLISHED
affected: defaultStatus: unaffected
platforms: Linux
product: iBoot PDU
vendor: Dataprobe
versions: lessThanOrEqual: <= 1.43.03312023
status: affected
version: 1.43.03312023
versionType: custom
credits: type: reporter
user: 00000000-0000-4000-9000-000000000000
value: Sam Quinn
type: reporter
user: 00000000-0000-4000-9000-000000000000
value: Douglas McKee
descriptions: supportingMedia: base64: no
type: text/html
value: The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful exploitation could cause denial of service or unexpected behavior with respect to all interactions relying on the targeted vulnerable binary, including the ability to log in via the web server.
value: The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful exploitation could cause denial of service or unexpected behavior with respect to all interactions relying on the targeted vulnerable binary, including the ability to log in via the web server.
impacts: capecId: CAPEC-100
descriptions: value: CAPEC-100 Overflow Buffers
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-119
description: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
type: CWE
source: discovery: UNKNOWN
x_generator: engine: Vulnogram 0.1.0-dev