Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x3gg-m9c9-95rp

Опубликовано: 31 янв. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior use a proprietary local area network (LAN) protocol that does not verify updates to the device. An attacker could upload a malformed update file to the device and execute arbitrary code.

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior use a proprietary local area network (LAN) protocol that does not verify updates to the device. An attacker could upload a malformed update file to the device and execute arbitrary code.

EPSS

Процентиль: 7%
0.00027
Низкий

7.8 High

CVSS3

Дефекты

CWE-345

Связанные уязвимости

CVSS3: 6.7
nvd
около 3 лет назад

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior use a proprietary local area network (LAN) protocol that does not verify updates to the device. An attacker could upload a malformed update file to the device and execute arbitrary code.

EPSS

Процентиль: 7%
0.00027
Низкий

7.8 High

CVSS3

Дефекты

CWE-345