PT-2023-19364 · Snap One · Snap One Wattbox Wb-300-Ip-3

Uri Katz · Published 2023-01-30 · Updated 2023-02-07 · CVE-2023-24020

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior

Description The issue allows bypassing the brute force protection, enabling multiple attempts to force a login.

Recommendations For Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior, update to a version later than WB10.9a17 to resolve the issue.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2023-24020

Affected Products

Snap One Wattbox Wb-300-Ip-3

References · 3

• https://osv.dev/vulnerability/CVE-2023-24020 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-24020 · Security Note
• https://cisa.gov/uscert/ics/advisories/icsa-23-026-03 · Note