PT-2023-18423 · Snap One · Snap One Wattbox Wb-300-Ip-3
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior
Description
The issue concerns a proprietary local area network (LAN) protocol used by the device that does not verify updates. This allows an attacker to upload a malformed update file, potentially leading to the execution of arbitrary code.
Recommendations
For Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior, update to a version later than WB10.9a17 to resolve the issue.
Correção
Insufficient Verification of Data Authenticity
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Snap One Wattbox Wb-300-Ip-3