Описание
Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior are vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary code or crash the device remotely.
Ссылки
- Third Party AdvisoryUS Government Resource
- Third Party AdvisoryUS Government Resource
Уязвимые конфигурации
Конфигурация 1Версия до wb10.9a17 (включая)
Одновременно
cpe:2.3:o:snapav:wattbox_wb-300-ip-3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:snapav:wattbox_wb-300-ip-3:-:*:*:*:*:*:*:*
EPSS
Процентиль: 73%
0.00742
Низкий
5.3 Medium
CVSS3
9.8 Critical
CVSS3
Дефекты
CWE-122
CWE-787
Связанные уязвимости
CVSS3: 9.8
github
около 3 лет назад
Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior are vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary code or crash the device remotely.
EPSS
Процентиль: 73%
0.00742
Низкий
5.3 Medium
CVSS3
9.8 Critical
CVSS3
Дефекты
CWE-122
CWE-787