News
Trellix Advanced Research Center Uncovers Vulnerabilities in Data Center Infrastructure

As part of a focused effort on vulnerability discovery in data centers, the Trellix Advanced Research Center has found four vulnerabilities in CyberPower’s Data Center Infrastructure Management (DCIM) platform and five vulnerabilities in Dataprobe’s iBoot Power Distribution Unit (PDU). An attacker could chain these vulnerabilities together to gain full access to these systems — which alone could be leveraged to commit substantial damage. Furthermore, both products are vulnerable to remote code injection that could be leveraged to create a backdoor or an entry point to the broader network of connected data center devices and enterprise systems.
CyberPower is a leading vendor of data center equipment and infrastructure solutions, specializing in power protection technologies and power management systems. Their DCIM platform allows IT teams to manage, configure, and monitor the infrastructure within a data center through the cloud, serving as a single source of information and control for all devices. These platforms are commonly used by companies managing on-premise server deployments to larger, co-located data centers — like those from major cloud providers AWS, Google Cloud, Microsoft Azure, etc.
Dataprobe manufactures power management products that assist businesses in monitoring and controlling their infrastructure. Their iBoot PDU allows administrators to remotely manage the power supply to their devices and equipment via a simple and easy-to-use web application. Dataprobe has thousands of devices across numerous industries — from deployments in data centers, travel and transportation infrastructure, financial institutions, smart city IoT installations, and government agencies.
The team found four major vulnerabilities in CyberPower’s DCIM and five critical vulnerabilities in the Dataprobe’s iBoot PDU:
- CyberPower DCIM:
- CVE-2023-3264: Use of Hard-coded Credentials (CVSS 6.7)
- CVE-2023-3265: Improper Neutralization of Escape, Meta, or Control Sequences (Auth Bypass; CVSS 7.2)
- CVE-2023-3266: Improperly Implemented Security Check for Standard (Auth Bypass; CVSS 7.5)
- CVE-2023-3267: OS Command Injection (Authenticated RCE; CVSS 7.5)
- Dataprobe iBoot PDU:
- CVE-2023-3259: Deserialization of Untrusted Data (Auth Bypass; CVSS 9.8)
- CVE-2023-3260: OS Command Injection (Authenticated RCE; CVSS 7.2)
- CVE-2023-3261: Buffer Overflow (DOS; CVSS 7.5)
- CVE-2023-3262: Use of Hard-coded Credentials (CVSS 6.7)
- CVE-2023-3263: Authentication Bypass by Alternate Name (Auth Bypass; CVSS 7.5)
“In a world growing ever-reliant on massive amounts of data for business operations, critical infrastructure, and basic internet activities, major vulnerabilities in the data centers making all this possible is a large risk to daily society. Vulnerabilities that enable cybercriminals to slowly infect entire data center deployments to steal key data and information or utilize compromised resources to initiate attacks at a global scale could be leveraged for massive damage. The threats and risks to both consumers and enterprises is high,” commented Sam Quinn, Senior Security Researcher and Jesse Chick, Vulnerability Researcher at the Trellix Advanced Research Center.
Below are some examples of the level of damage a malicious threat actor could do when utilizing exploits of this level across numerous data centers:
- Power Off: Through access to these power management systems, even the simple act of cutting power to devices connected to a PDU would be significant. Websites, business applications, consumer technologies, and critical infrastructure deployments all rely on the availability of these data centers to operate. A threat actor could cause significant disruption for days at a time with the simple “flip of a switch” in dozens of compromised data centers.
- Malware at Scale: Using these platforms to create a backdoor on the data center equipment provides bad actors a foothold to compromise a huge number of systems and devices. Some data centers host thousands of servers and connect to hundreds of various business applications. Malicious attackers could slowly compromise both the data center and the business networks connected to it.
- Digital Espionage: In addition to the previously mentioned malicious activities one would expect of cybercriminals, APTs and nation-state backed threat actors could leverage these exploits to conduct cyberespionage attacks.
Recommendation
Both Dataprobe and CyberPower have released fixes for these vulnerabilities with CyberPower DCIM version 2.6.9 of their PowerPanel Enterprise software and the latest 1.44.08042023 version of the Dataprobe iBoot PDU firmware. Trellix strongly urges all potentially impacted customers to download and install these patches immediately.
In addition to the official patches, Trellix would suggest taking additional steps for any devices or platforms potentially exposed to 0-day exploitation by these vulnerable products:
- Ensure that your PowerPanel Enterprise or iBoot PDU are not exposed to the wider Internet. Each should be reachable only from within your organization’s secure intranet.
- In the case of the iBoot PDU, Trellix suggests disabling remote access via Dataprobe’s cloud service as an added precaution.
- Modify the passwords associated with all user accounts and revoke any sensitive information stored on both appliances that may have been leaked.
- Update to the latest version of PowerPanel Enterprise or install the latest firmware for the iBoot PDU and subscribe to the relevant vendor’s security update notifications.
- Although this measure in and of itself will not reduce risk of attack via the vulnerabilities described in this document, updating all your software to the latest and greatest version promptly is the best practice for ensuring your window of exposure is as short as possible in this and future cases.
“The devices and software platforms that service data centers must remain secure and updated, and the vendors producing this hardware and software have processes in place for quick and efficient response following vulnerability disclosures,” added Quinn and Chick. “We applaud both CyberPower and Dataprobe for their willingness and expediency in working with our team following the discovery of these vulnerabilities. Their responsiveness in creating protections for these vulnerabilities and releasing a patch for their customers shows true organizational maturity and drive to improve security across the entire industry.”
News
Free Mineral Water for All: UAE Startup to Launch Groundbreaking Public Hydration Initiative

Staying hydrated just got easier, and greener, thanks to Ourwatr, that’s launching a nationwide free mineral water programme starting June 2025. It’s a first in the region: clean, refreshing mineral water made freely available across the country, delivered through a unique model that blends sustainability, community care, and social impact.
From metro stations and shopping malls to parks and government offices, thousands of chilled bottles of mineral water, sourced locally from Dibba, Fujairah, will soon be within everyone’s reach, every day. Ourwatr’s mission is simple: hydration is a right, not a privilege.
“At Ourwatr, we believe that drinking water should be accessible to all,” says Abhinav Murali, Co-founder.
“That’s why we’re giving away premium mineral water for free, and every bottle supports communities in need. It’s hydration with heart, proudly made right here in the UAE.”
Stamp of UAE quality
All Ourwatr bottles carry the prestigious EQM (Emirates Quality Mark) certification, guaranteeing they meet strict UAE national and international quality standards. When you grab a bottle, you’re assured of top-quality water, safe, pure, refreshing and approved by the country’s standardisation authority.
Mission in a bottle
With temperatures rising across the UAE, especially during summer, access to clean drinking water is more important than ever, for workers, families, children, and the elderly alike.

“In our desert climate, hydration isn’t just healthy; it’s life-saving,” adds co-founder Bharath Mohan.
“Each bottle we provide is a small act of kindness toward our community.”
Ourwatr is more than just a startup, it’s a mission in a bottle. Launched by three young, UAE-based entrepreneurs, the idea was sparked by a simple but powerful observation: access to free, convenient hydration isn’t always a given.
Wanting to change that, the trio built a business with heart at its core. The team is also in talks with various UAE charitable organisations and government agencies to expand its reach and impact. For every bottle distributed, a portion will be donated to local charities, turning everyday hydration into a meaningful act of giving.
A Model Built on Purpose and Sustainability
Ourwatr isn’t just about water, it’s about doing good. Instead of selling to consumers, the company partners with brands and organisations who cover the production and distribution costs. In return, sponsors co-brand the bottles, using them as a platform to share positive messages and shared values, while making a real difference.
“Sustainability isn’t just about less waste, it’s about creating lasting, meaningful change,” explains Sharat Nair, Co-founder.
The bottles are crafted from recyclable materials, aligning with the UAE’s zero-waste goals and green agenda.
Backing UAE Vision 2030
Ourwatr’s initiative supports the UAE’s Vision 2030 goals around health, sustainability, and quality of life. The startup is already collaborating with local authorities to expand water access and reach as many people as possible.
More than just water, Ourwatr is delivering hope, equality, and care, one bottle at a time.
Home Integrator
Ardee Developments Announces Sales Launch for Fairmont Residences Al Marjan Island

Ardee Developments has announced the launch of sales for Fairmont Residences Al Marjan Island, its highly anticipated branded residential offering in partnership with Fairmont Hotels & Resorts.
Official sales will commence on 1 June 2025 with expression of interest starting 15 May 2025, marking a major milestone in the evolution of Ardee Al Marjan Island, the company’s flagship, multi-billion-dirham development set to redefine coastal living in Ras Al Khaimah.
Fairmont Residences Al Marjan Island will comprise 523 upscale residences — including apartments, townhouses, and sea villas — ranging from one to six bedrooms and spanning 86 m² to over 300 m². Every home is thoughtfully designed to embody refined beachfront living, with uninterrupted sea views and elegant interiors that reflect timeless sophistication.
Bringing together the prestige of the Fairmont brand with the ease of resort-style living, residents will enjoy exclusive access to a private beach, the Fairmont Fit Fitness Centre and Studio, family & kids pool, adults sky pool & terrace & bar, dedicated boardroom and private dining room, resident’s owners lounge as well as wellness facilities including treatment rooms, screening room, games room, kids club and seamless connectivity to the adjacent Fairmont resort.
Further enriching the offering is a tailored suite of à la carte services. From in-home catering and private chef experiences to childcare, dog walking, housekeeping, personal concierge support, and a home maintenance program while residents are away, every element is designed to simplify and enhance everyday living. In addition, residents will enjoy exclusive access to the Accor Owner Benefits Program. This includes Diamond status in the Accor Live Limitless (ALL) programme, the ability to gift Gold status to family and friends, and VIP privileges at over 5,700 hotels and resorts around the world.
With prices starting from AED 2.49 Million, Fairmont Residences Al Marjan Island offers an exclusive opportunity for discerning buyers seeking long-term value, effortless luxury, and a lifestyle defined by exceptional quality in one of the region’s most iconic coastal destinations.
Beyond the residences, guests were given an exclusive look at the next phase of the Ardee Al Marjan Island masterplan. The development is progressing into a fully integrated coastal destination that blends residences, hospitality, leisure, retail, and entertainment on an unprecedented scale.
Key components of the masterplan include branded and serviced residences, private villas, townhouses, a flagship luxury hotel, and a vibrant retail and F&B promenade. The destination will also feature a variety of curated lifestyle offerings — from wellness hubs and gaming lounges to family entertainment zones and waterfront experiences — all designed to create a future-ready, immersive community.
Prioritizing walkability, nature access, and sea connectivity, the project will boast expansive green spaces, direct beach access, and panoramic views, setting a new standard for contemporary island living in Ras Al Khaimah.
Vishal Mehta, CEO of Ardee Developments, added: “As we prepare to open sales of Fairmont Residences Al Marjan Island this June, we are proud to invite buyers into a community that reflects excellence at every level. In partnership with Al Marjan Island, Fairmont Hotels, and Christie’s International Real Estate, we are shaping a new era of luxury coastal living in Ras Al Khaimah — one defined by world-class design, hospitality, and lifestyle, brought together in a truly integrated destination.”
To support global sales efforts, Ardee Developments has appointed Christie’s International Real Estate Ras Al Khaimah as the exclusive master agency. Christie’s will lead GCC and international outreach and client servicing, ensuring a seamless buyer journey.
“This is a vibrant and integrated coastal lifestyle community that combines natural beauty, unparalleled hospitality and leisure not seen in the area before,” said Jackie Johns and Dinesh Chhatwani, Managing Partners at Christie’s International Real Estate Ras Al Khaimah. “Ras Al Khaimah’s momentum as a global hospitality and investment hub, and its rapidly growing real estate market, makes it the ideal launchpad for Ardee Developments to execute its grand vision.”
Home Integrator
MERED Unveils Strategic Vision for Saudi Arabia at Saudi Giga Projects 2025

MERED outlined its long-term investment plans and strategic vision for Saudi Arabia at Saudi Giga Projects 2025 in Riyadh. The event, a key platform aligned with Vision 2030, brought together government bodies, giga project leaders, and private sector executives to discuss development, contracting, and talent-building opportunities within the Kingdom’s fast-growing construction and real estate sectors. As part of MERED’s participation, CEO Michael Belton joined a fireside chat where he shared insights into the company’s market entry approach and growth plans for the Saudi market.
“The Kingdom’s rapid urban and infrastructure growth is reshaping residential demand and creating new opportunities for long-term development,” said Michael Belton, CEO of MERED. “Vision 2030 and ongoing economic diversification are driving strong demand across residential, retail, commercial, and hospitality sectors, supported by investor-friendly reforms. In major cities like Riyadh and Jeddah, we’re seeing increased interest in premium and luxury living, as well as growing demand for Class A office spaces that reflect the ambitions of a modern business environment. MERED is well-positioned to meet these changing market needs through high-quality, innovative developments that offer lasting value.”
Yazan Al-Khalidi, Chief Commercial Director at MERED, joined a panel alongside leading developers, consultants, and contractors to discuss workforce capabilities and the skills required to deliver Saudi Arabia’s giga projects efficiently and at scale. The Kingdom’s real estate sector is projected to contribute 10% to GDP by 2030, while non-oil economic activity now accounts for over 50% of national GDP. Knight Frank’s Saudi Report 2025 reveals that 93% of high-income Saudi nationals are actively seeking to buy property, reinforcing the country’s ambition to build a competitive luxury real estate market.
Alongside its growth plans in Saudi Arabia, MERED is supporting the development of future architectural talent in line with the region’s broader goal of equipping young people with in-demand skills. As part of this effort, the company is sponsoring a select group of students to attend the Pininfarina Architecture Summer School in Turin this July, through its partnership with the prestigious Pininfarina Academy, founded by the renowned Italian design house. The program offers hands-on training and exposure to international design practices, giving participants valuable experience they can apply to architectural projects across the region.
MERED’s participation underscores its broader commitment to supporting the Kingdom’s real estate ambitions through innovation, sustainability, and knowledge transfer. With a pipeline of projects already launched in Dubai and Abu Dhabi, including the 290-meter ICONIC Residences designed by Pininfarina, the brand is well-positioned to introduce high-end, future-ready developments to the Saudi market.
-
Tech News11 months ago
Denodo Bolsters Executive Team by Hiring Christophe Culine as its Chief Revenue Officer
-
Tech Interviews1 year ago
Navigating the Cybersecurity Landscape in Hybrid Work Environments
-
Tech News1 year ago
Brighton College Abu Dhabi and Brighton College Al Ain Donate 954 IT Devices in Support of ‘Donate Your Own Device’ Campaign
-
VAR10 months ago
Samsung Galaxy Z Fold6 vs Google Pixel 9 Pro Fold: Clash Of The Folding Phenoms
-
Tech Features12 months ago
The Middle East to Lead with Next-generation Mission Critical Communication Advancement
-
VAR2 months ago
Microsoft Launches New Surface Copilot+ PCs for Business
-
Features1 year ago
Security in the Cloud Age: Combating Risks with Hybrid Cloud Solutions
-
Automotive1 year ago
Al-Futtaim Automotive Builds On 23-Year Legacy of Trust & Leadership in UAE’s Pre-Owned Car Market to Sell Over 25,000 Used Vehicles in 2023