CVE-2023-3261

Summary

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful exploitation could cause denial of service or unexpected behavior with respect to all interactions relying on the targeted vulnerable binary, including the ability to log in via the web server.

Affected Software

Weaknesses

• CWE-119: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

ADP Enrichment

CVE Program Container

Additional References

• https://www.trellix.com/en-us/about/newsroom/stories/research/the-threat-lurking-in-data-centers.html

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://www.trellix.com/en-us/about/newsroom/stories/research/the-threat-lurking-in-data-centers.html

• ←Previous
• Next→