CVE-2023-22315

CVE-2023-22315 – Snap One Wattbox WB-300-IP-3 : The vulnerability affects Wattbox WB-300-IP-3 devices running WB10.9a17 and earlier. The root cause is a proprietary LAN protocol that does not verify updates, allowing an attacker to upload a malformed update file and execute arbitrary code on the ...

CVE-2023-22315

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior use a proprietary local area network LAN protocol that does not verify updates to the device. An attacker could upload a malformed update file to the device and execute arbitrary code...

CVE-2023-24020

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior could bypass the brute force protection, allowing multiple attempts to force a login...

CVE-2023-24020

CVE-2023-24020 affects Snap One Wattbox WB-300-IP-3; root cause: improper restriction of excessive authentication attempts (CWE-307). Affected: Wattbox WB-300-IP-3, versions WB10.9a17 and prior. Impact: could bypass brute-force protection and allow multiple login attempts, enabling credential gue...

CVE-2023-24020

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior could bypass the brute force protection, allowing multiple attempts to force a login...

PT-2023-18481 · Snap One · Snap One Wattbox Wb-300-Ip-3

Name of the Vulnerable Software and Affected Versions: Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior Description: The issue concerns the storage of passwords in a plaintext file when the device configuration is exported via Save/Restore–Backup Settings. This could allow any user...

PT-2023-19059 · Snap One · Snap One Wattbox Wb-300-Ip-3

Name of the Vulnerable Software and Affected Versions: Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior Description: The issue is a heap-based buffer overflow that could allow an attacker to execute arbitrary code or crash the device remotely. Recommendations: For Snap One Wattbox...

PT-2023-18423 · Snap One · Snap One Wattbox Wb-300-Ip-3

Name of the Vulnerable Software and Affected Versions: Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior Description: The issue concerns a proprietary local area network LAN protocol used by the device that does not verify updates. This allows an attacker to upload a malformed update file...

CVE-2023-23582: Heap-based Buffer Overflow

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior are vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary code or crash the device remotely...

CVE-2023-24020: Improper Restriction of Excessive Authentication Attempts

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior could bypass the brute force protection, allowing multiple attempts to force a login...

CVE-2023-22389: Plaintext Storage of a Password

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior store passwords in a plaintext file when the device configuration is exported via Save/Restore–Backup Settings, which could be read by any user accessing the file...

PT-2023-19364 · Snap One · Snap One Wattbox Wb-300-Ip-3

Name of the Vulnerable Software and Affected Versions: Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior Description: The issue allows bypassing the brute force protection, enabling multiple attempts to force a login. Recommendations: For Snap One Wattbox WB-300-IP-3 versions WB10.9a17 an...

CVE-2023-22315: Insufficient Verification of Data Authenticity

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior use a proprietary local area network LAN protocol that does not verify updates to the device. An attacker could upload a malformed update file to the device and execute arbitrary code...

Snap One Wattbox 安全漏洞

Snap One Wattbox is a range of power solutions from Snap One. A security vulnerability exists in Snap One Wattbox WB-300-IP-3 WB10.9a17 and prior versions, which stems from allowing multiple attempts to force a login, which can be exploited by an attacker to brute-force a login...

Snap One Wattbox 安全漏洞

Snap One Wattbox is a range of power solutions from Snap One. A security vulnerability exists in the Snap One Wattbox WB-300-IP-3 WB10.9a17 version and prior versions, which stems from passwords being stored in a plaintext file that can be read by any user with access to the file...

Snap One Wattbox WB-300-IP-3

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Snap One Equipment: Wattbox WB-300-IP -3 Vulnerabilities: Improper Restriction of Excessive Authentication Attempts, Heap-based Buffer Overflow, Plaintext Storage of a Password, Insufficient Verificatio...

CVE-2023-23597

A compromised web child process could disable web security opening restrictions, leading to a new child process being spawned within the file:// context. Given a reliable exploit primitive, this new process could be exploited again leading to arbitrary file read. This vulnerability affects Firefo...

CVE-2023-0133

Inappropriate implementation in in Permission prompts in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to bypass main origin permission delegation via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-0140

Inappropriate implementation in in File System API in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2021-30558

Insufficient policy enforcement in content security policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chrome security severity: Medium...