PT-2023-19059 · Snap One · Snap One Wattbox Wb-300-Ip-3

Uri Katz · Published 2023-01-30 · Updated 2023-02-07 · CVE-2023-23582

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior

Description The issue is a heap-based buffer overflow that could allow an attacker to execute arbitrary code or crash the device remotely.

Recommendations For Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior, update to a version later than WB10.9a17 to resolve the issue.

Fix

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-787

CWE-122

Related Identifiers

CVE-2023-23582

Affected Products

Snap One Wattbox Wb-300-Ip-3

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-23582 · Security Note
• https://osv.dev/vulnerability/CVE-2023-23582 · Vendor Advisory
• https://cisa.gov/uscert/ics/advisories/icsa-23-026-03 · Note
• https://t.me/cvenotify/43152 · Telegram Post
• https://t.me/cvenotify/43775 · Telegram Post
• https://t.me/cibsecurity/57189 · Telegram Post