CVE-2023-3263

CVE-2023-3263 is an authentication bypass vulnerability affecting Dataprobe iBoot PDU devices running firmware version 1.43.03312023 or earlier. This flaw allows an unauthenticated attacker to obtain a valid authorization token by exploiting mishandled special characters in the REST API, enabling them to read sensitive relay and power distribution information. Rated 7.5 HIGH, it is easily exploitable over the network with low attack complexity and no user interaction, leading to high confidentiality impact. While there is no known active exploitation or public exploit code, the vulnerability has garnered significant community discussion and media coverage, indicating notable interest.