CVE-2023-3261

概要

参考情報

• trellix.com/en-us/about/newsroom/stories/research/the-threat-lurking-in-data-centers.html · Vendor Advisory

powerpanel server のその他の脆弱性

• CVE-2023-3267高 8.8When adding a remote backup location, an authenticated user can pass arbitrary OS commands through the username field. The username is passe…
• CVE-2023-3266緊急 9.8A non-feature complete authentication mechanism exists in the production application allowing an attacker to bypass all authentication check…
• CVE-2023-3265緊急 9.8An authentication bypass exists on CyberPower PowerPanel Enterprise by failing to sanitize meta-characters from the username, allowing an at…
• CVE-2023-3264緊急 9.8The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal…
• CVE-2023-3260高 8.8The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL paramet…