PT-2023-19059 · Snap One · Snap One Wattbox Wb-300-Ip-3

Name of the Vulnerable Software and Affected Versions: Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior Description: The issue is a heap-based buffer overflow that could allow an attacker to execute arbitrary code or crash the device remotely. Recommendations: For Snap One Wattbox...

PT-2023-18481 · Snap One · Snap One Wattbox Wb-300-Ip-3

Name of the Vulnerable Software and Affected Versions: Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior Description: The issue concerns the storage of passwords in a plaintext file when the device configuration is exported via Save/Restore–Backup Settings. This could allow any user...

PT-2023-19364 · Snap One · Snap One Wattbox Wb-300-Ip-3

Name of the Vulnerable Software and Affected Versions: Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior Description: The issue allows bypassing the brute force protection, enabling multiple attempts to force a login. Recommendations: For Snap One Wattbox WB-300-IP-3 versions WB10.9a17 an...

CVE-2023-22389: Plaintext Storage of a Password

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior store passwords in a plaintext file when the device configuration is exported via Save/Restore–Backup Settings, which could be read by any user accessing the file...

CVE-2023-22315: Insufficient Verification of Data Authenticity

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior use a proprietary local area network LAN protocol that does not verify updates to the device. An attacker could upload a malformed update file to the device and execute arbitrary code...

CVE-2023-24020: Improper Restriction of Excessive Authentication Attempts

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior could bypass the brute force protection, allowing multiple attempts to force a login...

Snap One Wattbox has a vulnerability related to data falsification.

Snap One Wattbox is a line of power solutions from Snap One, Inc. Snap One Wattbox WB-300-IP-3 WB10.9a17 version and prior versions are vulnerable to a data forgery issue that stems from the use of a private local area network LAN protocol that does not validate device updates. An attacker could...

Snap One Wattbox security vulnerability

Snap One Wattbox is a range of power solutions from Snap One. A security vulnerability exists in Snap One Wattbox WB-300-IP-3 WB10.9a17 and prior versions, which stems from allowing multiple attempts to force a login, which can be exploited by an attacker to brute-force a login...

Snap One Wattbox buffer error vulnerability

Snap One Wattbox is a range of power solutions from Snap One. A security vulnerability exists in Snap One Wattbox WB-300-IP-3 WB10.9a17 version and prior versions, which stems from vulnerability to heap-based buffer overflow attacks. An attacker exploiting this vulnerability could execute arbitra...

Snap One Wattbox security vulnerability

Snap One Wattbox is a range of power solutions from Snap One. A security vulnerability exists in the Snap One Wattbox WB-300-IP-3 WB10.9a17 version and prior versions, which stems from passwords being stored in a plaintext file that can be read by any user with access to the file...

Snap One Wattbox WB-300-IP-3

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Snap One Equipment: Wattbox WB-300-IP -3 Vulnerabilities: Improper Restriction of Excessive Authentication Attempts, Heap-based Buffer Overflow, Plaintext Storage of a Password, Insufficient Verificatio...