CVE-2007-6759

Dataprobe iBootBar (with 2007-09-20 and possibly later released firmware) allows remote attackers to bypass authentication, and conduct power-cycle attacks on connected devices, via a DCRABBIT cookie.

• CWE-287

• http://blog.tmcnet.com/blog/tom-keating/computer-hardware/dataprobe-ibootbar-review.aspTechnical Description, Third Party Advisory
• http://blog.tmcnet.com/blog/tom-keating/computer-hardware/dataprobe-ibootbar-review.aspTechnical Description, Third Party Advisory

Published

Apr 7, 2017

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-6753Untrusted search path vulnerability in Shell32.dll in Micros…
• CVE-2007-6754The ipalloc function in libc/stdlib/malloc.c in jemalloc in …
• CVE-2007-6755The NIST SP 800-90A default statement of the Dual Elliptic C…
• CVE-2007-6756ZOLL Defibrillator / Monitor M Series, E Series, and R Serie…
• CVE-2007-6757GE Healthcare Centricity DMS 4.2, 4.1, and 4.0 has a passwor…
• CVE-2007-6758Server-side request forgery (SSRF) vulnerability in feed-pro…7.5
• CVE-2007-6760Dataprobe iBootBar (with 2007-09-20 and possibly later beta …
• CVE-2007-6761drivers/media/video/videobuf-vmalloc.c in the Linux kernel b…
• CVE-2007-6762In the Linux kernel before 2.6.20, there is an off-by-one bu…
• CVE-2007-6763SAS Drug Development (SDD) before 32DRG02 mishandles logout …