CVE-2023-3261

Mô tả

Tham khảo

• trellix.com/en-us/about/newsroom/stories/research/the-threat-lurking-in-data-centers.html · Vendor Advisory

Lỗ hổng khác của powerpanel server

• CVE-2023-3267CAO 8.8When adding a remote backup location, an authenticated user can pass arbitrary OS commands through the username field. The username is passe…
• CVE-2023-3266NGHIÊM TRỌNG 9.8A non-feature complete authentication mechanism exists in the production application allowing an attacker to bypass all authentication check…
• CVE-2023-3265NGHIÊM TRỌNG 9.8An authentication bypass exists on CyberPower PowerPanel Enterprise by failing to sanitize meta-characters from the username, allowing an at…
• CVE-2023-3264NGHIÊM TRỌNG 9.8The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal…
• CVE-2023-3260CAO 8.8The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL paramet…