Back to Database
Status published
Medium
CVE-2023-22315
Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior use a...
Vulnerability Description
Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior use a proprietary local area network (LAN) protocol that does not verify updates to the device. An attacker could upload a malformed update file to the device and execute arbitrary code.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-22315
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Uri Katz of Claroty Research reported these vulnerabilities to CISA.
More from Snap One
View All →CVE-2024-50381
Missing Authentication for Critical Function in Snap One OVRC cloud
High
8.8
CVE-2024-50380
Authentication Bypass by Spoofing in Snap One OVRC cloud
High
8.7
CVE-2023-31245
Devices using Snap One OvrC cloud are sent to a...
High
7.1
CVE-2023-31241
Snap One OvrC cloud servers contain a route an attacker...
High
8.6
CVE-2023-31240
Snap One OvrC Pro versions prior to 7.2 have their...
High
8.3
Affected Vendor
Snap One
View all reports →Affected Software
Wattbox WB-300-IP-3
Vulnerable Versions:
0
Timeline
Official Publish:
January 30th, 2023
Last Modified:
January 16th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H