CVE-2023-24020

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior could bypass the brute force protection, allowing multiple attempts to force a login...

CVE-2023-22315

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior use a proprietary local area network LAN protocol that does not verify updates to the device. An attacker could upload a malformed update file to the device and execute arbitrary code...

CVE-2023-24020

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior could bypass the brute force protection, allowing multiple attempts to force a login...

Design/Logic Flaw

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior could bypass the brute force protection, allowing multiple attempts to force a login...

Code injection

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior use a proprietary local area network LAN protocol that does not verify updates to the device. An attacker could upload a malformed update file to the device and execute arbitrary code...

CVE-2023-23582

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior are vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary code or crash the device remotely...

CVE-2023-23582

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior are vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary code or crash the device remotely...

CVE-2023-23582

Summary of CVE-2023-23582 (Snap One Wattbox WB-300-IP-3) : A heap-based buffer overflow affects Snap One Wattbox WB-300-IP-3, versions WB10.9a17 and prior. The vulnerability could allow an attacker to execute arbitrary code or crash the device remotely. Mitigation provided in the connected adviso...

CVE-2023-22389

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior store passwords in a plaintext file when the device configuration is exported via Save/Restore–Backup Settings, which could be read by any user accessing the file...

CVE-2023-22389

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior store passwords in a plaintext file when the device configuration is exported via Save/Restore–Backup Settings, which could be read by any user accessing the file...

CVE-2023-22389

CVE-2023-22389 affects Snap One Wattbox WB-300-IP-3 (versions WB10.9a17 and prior). The vulnerability is plaintext storage of passwords when the device configuration is exported via Save/Restore–>Backup Settings, allowing any user with access to the exported file to read passwords. Other conne...

CVE-2023-22315

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior use a proprietary local area network LAN protocol that does not verify updates to the device. An attacker could upload a malformed update file to the device and execute arbitrary code...

CVE-2023-22315

CVE-2023-22315 – Snap One Wattbox WB-300-IP-3 : The vulnerability affects Wattbox WB-300-IP-3 devices running WB10.9a17 and earlier. The root cause is a proprietary LAN protocol that does not verify updates, allowing an attacker to upload a malformed update file and execute arbitrary code on the ...

CVE-2023-22315

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior use a proprietary local area network LAN protocol that does not verify updates to the device. An attacker could upload a malformed update file to the device and execute arbitrary code...

CVE-2023-24020

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior could bypass the brute force protection, allowing multiple attempts to force a login...

CVE-2023-24020

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior could bypass the brute force protection, allowing multiple attempts to force a login...

CVE-2023-24020

CVE-2023-24020 affects Snap One Wattbox WB-300-IP-3; root cause: improper restriction of excessive authentication attempts (CWE-307). Affected: Wattbox WB-300-IP-3, versions WB10.9a17 and prior. Impact: could bypass brute-force protection and allow multiple login attempts, enabling credential gue...

PT-2023-18481 · Snap One · Snap One Wattbox Wb-300-Ip-3

Name of the Vulnerable Software and Affected Versions: Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior Description: The issue concerns the storage of passwords in a plaintext file when the device configuration is exported via Save/Restore–Backup Settings. This could allow any user...

PT-2023-18423 · Snap One · Snap One Wattbox Wb-300-Ip-3

Name of the Vulnerable Software and Affected Versions: Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior Description: The issue concerns a proprietary local area network LAN protocol used by the device that does not verify updates. This allows an attacker to upload a malformed update file...

PT-2023-19364 · Snap One · Snap One Wattbox Wb-300-Ip-3

Name of the Vulnerable Software and Affected Versions: Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior Description: The issue allows bypassing the brute force protection, enabling multiple attempts to force a login. Recommendations: For Snap One Wattbox WB-300-IP-3 versions WB10.9a17 an...