PT-2023-19364 · Snap One · Snap One Wattbox Wb-300-Ip-3

CVE-2023-24020

Publicado

2023-01-30

Atualizado

2023-02-07

CVSS v3.1

9.8

Crítica

Vetor

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior

Description The issue allows bypassing the brute force protection, enabling multiple attempts to force a login.

Recommendations For Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior, update to a version later than WB10.9a17 to resolve the issue.

Correção

Improper Restriction of Excessive Authentication Attempts

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

CVE-2023-24020

Snap One Wattbox Wb-300-Ip-3