{"id":"CVE-2023-3260","aliases":["EUVD-2023-43936","GHSA-xrfp-wpx5-pg4h"],"status":"published","title":"When adding a remote backup location, an authenticated user can pass arbitrary OS commands...","description":"The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parameter. An authenticated malicious agent can exploit this vulnerability to execute arbitrary command on the underlying Linux operating system.","severity":{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.01264,"percentile":0.70087,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-78"],"published":"2023-08-14T03:51:52Z","modified":"2026-06-17T06:13:41Z","products":[{"vendor":"cyberpower","product":"powerpanel_server"},{"vendor":"dataprobe","product":"iboot pdu"},{"vendor":"dataprobe","product":"iboot-pdu4-c20_firmware"},{"vendor":"dataprobe","product":"iboot-pdu4-n20_firmware"},{"vendor":"dataprobe","product":"iboot-pdu4a-c10_firmware"},{"vendor":"dataprobe","product":"iboot-pdu4a-c20_firmware"},{"vendor":"dataprobe","product":"iboot-pdu4a-n15_firmware"},{"vendor":"dataprobe","product":"iboot-pdu4a-n20_firmware"},{"vendor":"dataprobe","product":"iboot-pdu4sa-c10_firmware"},{"vendor":"dataprobe","product":"iboot-pdu4sa-c20_firmware"},{"vendor":"dataprobe","product":"iboot-pdu4sa-n15_firmware"},{"vendor":"dataprobe","product":"iboot-pdu4sa-n20_firmware"},{"vendor":"dataprobe","product":"iboot-pdu8a-2c10_firmware"},{"vendor":"dataprobe","product":"iboot-pdu8a-2c20_firmware"},{"vendor":"dataprobe","product":"iboot-pdu8a-2n15_firmware"},{"vendor":"dataprobe","product":"iboot-pdu8a-2n20_firmware"},{"vendor":"dataprobe","product":"iboot-pdu8a-c10_firmware"},{"vendor":"dataprobe","product":"iboot-pdu8a-c20_firmware"},{"vendor":"dataprobe","product":"iboot-pdu8a-n15_firmware"},{"vendor":"dataprobe","product":"iboot-pdu8a-n20_firmware"},{"vendor":"dataprobe","product":"iboot-pdu8sa-2n15_firmware"},{"vendor":"dataprobe","product":"iboot-pdu8sa-c10_firmware"},{"vendor":"dataprobe","product":"iboot-pdu8sa-n15_firmware"},{"vendor":"dataprobe","product":"iboot-pdu8sa-n20_firmware"}],"references":[{"url":"https://www.trellix.com/en-us/about/newsroom/stories/research/the-threat-lurking-in-data-centers.html","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3260"},{"url":"https://github.com/advisories/GHSA-xrfp-wpx5-pg4h"}],"sources":{"cve":[{"id":"CVE-2023-3260","description":"The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parameter. An authenticated malicious agent can exploit this vulnerability to execute arbitrary command on the underlying Linux operating system.","status":"published","published":"2023-08-14T03:51:52.015Z","modified":"2024-10-09T13:23:37.663Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:35:24.707957Z"}],"euvd":[{"id":"EUVD-2023-43936","description":"The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parameter. An authenticated malicious agent can exploit this vulnerability to execute arbitrary command on the underlying Linux operating system.","status":"published","published":"2023-08-14T03:51:52Z","modified":"2024-10-09T13:23:37Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:27:43.911558Z"}],"ghsa":[{"id":"GHSA-xrfp-wpx5-pg4h","title":"When adding a remote backup location, an authenticated user can pass arbitrary OS commands...","description":"When adding a remote backup location, an authenticated user can pass arbitrary OS commands through the username field. The username is passed without sanitization into CMD running as NT/Authority System. An authenticated attacker can leverage this vulnerability to execute arbitrary code with system-level access to the CyberPower PowerPanel Enterprise server.","status":"published","published":"2023-08-14T06:30:20Z","modified":"2024-04-04T06:54:22Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:56:46.449942Z"}],"nvd":[{"id":"CVE-2023-3260","description":"The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parameter. An authenticated malicious agent can exploit this vulnerability to execute arbitrary command on the underlying Linux operating system.","status":"published","published":"2023-08-14T04:15:10.83Z","modified":"2026-06-17T06:13:41.487Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:08:22.812138Z"}]}}