{"id":"CVE-2023-3261","state":"PUBLISHED","title":"The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful exploitation could caus","description":"The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful exploitation could cause denial of service or unexpected behavior with respect to all interactions relying on the targeted vulnerable binary, including the ability to log in via the web server.","publishedAt":"2023-08-14T03:53:59.429Z","updatedAt":"2024-10-09T14:46:12.138Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","source":"trellix"},"assigner":"trellix","products":["Dataprobe iBoot PDU"],"affected":[{"vendor":"Dataprobe","product":"iBoot PDU","defaultStatus":"unaffected","versions":[{"version":"1.43.03312023","status":"affected","lessThanOrEqual":"<= 1.43.03312023","versionType":"custom"}],"platforms":["Linux"]}],"references":["https://www.trellix.com/en-us/about/newsroom/stories/research/the-threat-lurking-in-data-centers.html"],"weaknesses":["CWE-119"],"ingestedAt":"2026-10-29T20:06:08.715Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/3xxx/CVE-2023-3261.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-3261","state":"PUBLISHED","datePublished":"2023-08-14T03:53:59.429Z","dateUpdated":"2024-10-09T14:46:12.138Z","assignerShortName":"trellix","assignerOrgId":"01626437-bf8f-4d1c-912a-893b5eb04808","dateReserved":"2023-06-15T06:50:23.491Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful exploitation could cause denial of service or unexpected behavior with respect to all interactions relying on the targeted vulnerable binary, including the ability to log in via the web server."}],"affected":[{"vendor":"Dataprobe","product":"iBoot PDU","defaultStatus":"unaffected","versions":[{"version":"1.43.03312023","status":"affected","lessThanOrEqual":"<= 1.43.03312023","versionType":"custom"}],"platforms":["Linux"]}],"references":[{"url":"https://www.trellix.com/en-us/about/newsroom/stories/research/the-threat-lurking-in-data-centers.html"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-119","description":"CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"trellix","orgId":"01626437-bf8f-4d1c-912a-893b5eb04808","dateUpdated":"2023-08-25T05:07:39.859Z"},"credits":[{"lang":"en","type":"reporter","user":"00000000-0000-4000-9000-000000000000","value":"Sam Quinn"},{"lang":"en","type":"reporter","user":"00000000-0000-4000-9000-000000000000","value":"Douglas McKee"}],"impacts":[{"capecId":"CAPEC-100","descriptions":[{"lang":"en","value":"CAPEC-100 Overflow Buffers"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.trellix.com/en-us/about/newsroom/stories/research/the-threat-lurking-in-data-centers.html","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T06:48:08.264Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-10-09T14:45:59.188449Z","id":"CVE-2023-3261","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-10-09T14:46:12.138Z"}}]}}}