CVE-2007-6759

CriticalCVSS 9.8/10Last modified Jun 16, 2026

Description

Dataprobe iBootBar (with 2007-09-20 and possibly later released firmware) allows remote attackers to bypass authentication, and conduct power-cycle attacks on connected devices, via a DCRABBIT cookie.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://blog.tmcnet.com/blog/tom-keating/computer-hardware/dataprobe-ibootbar-review.aspTechnical Description, Third Party Advisory
http://blog.tmcnet.com/blog/tom-keating/computer-hardware/dataprobe-ibootbar-review.aspTechnical Description, Third Party Advisory

Timeline

Published: Apr 7, 2017
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2007

CVE-2007-67609.8Dataprobe iBootBar (with 2007-09-20 and possibly later beta firmware) allows remote attackers to bypass authentication, and conduct power-cy CVE-2007-67617.8drivers/media/video/videobuf-vmalloc.c in the Linux kernel before 2.6.24 does not initialize videobuf_mapping data structures, which allows CVE-2007-67629.8In the Linux kernel before 2.6.20, there is an off-by-one bug in net/netlabel/netlabel_cipso_v4.c where it is possible to overflow the doi_d CVE-2007-67638.8SAS Drug Development (SDD) before 32DRG02 mishandles logout actions, which allows a user (who was previously logged in) to access resources