Description
Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior use a proprietary local area network (LAN) protocol that does not verify updates to the device. An attacker could upload a malformed update file to the device and execute arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Snap One | Wattbox WB-300-IP-3 | ≤ WB10.9a17 | — |
Advisories 1
- ICSA-23-026-03 Snap One Wattbox WB-300-IP-3 CISA ICS & IT advisories · Jan 26, 2023