| Package | Affected versions | Patched versions |
|---|---|---|
| powerpanel server | < 2.6.9 | 2.6.9 |
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parameter. An authenticated malicious agent can exploit this vulnerability to execute arbitrary command on the underlying Linux operating system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free