Wattbox WB-300-IP-3 vulnerabilities

2 known vulnerabilities in Wattbox WB-300-IP-3 from Snap One. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Wattbox WB-300-IP-3: Out-of-bounds Write

  CVE-2023-23582Jan 30, 2023Snap One

  Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior are vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary code or crash the device remotely.

• 7.8 High severity

  Wattbox WB-300-IP-3: Insufficient Verification of Data Authenticity

  CVE-2023-22315Jan 30, 2023Snap One

  Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior use a proprietary local area network (LAN) protocol that does not verify updates to the device. An attacker could upload a malformed update file to the device and execute arbitrary code.