Lucene search

[email protected]CVE-2023-24020

HistoryJan 30, 2023 - 10:15 p.m.

CVE-2023-24020

2023-01-3022:15:12

CWE-307

[email protected]

web.nvd.nist.gov

cve-2023-24020

snap one

wattbox

wb-300-ip-3

security vulnerability

brute force protection

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.4%

JSON

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior could bypass the brute force protection, allowing multiple attempts to force a login.

Affected configurations

NVD

Node

snapavwattbox_wb-300-ip-3_firmwareRange≤wb10.9a17

AND

snapavwattbox_wb-300-ip-3Match-

CPENameOperatorVersion
snapav:wattbox_wb-300-ip-3_firmwaresnapav wattbox wb-300-ip-3 firmwarelewb10.9a17

CPE	Name	Operator	Version
snapav:wattbox_wb-300-ip-3_firmware	snapav wattbox wb-300-ip-3 firmware	le	wb10.9a17

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Wattbox WB-300-IP-3",
    "vendor": "Snap One",
    "versions": [
      {
        "lessThanOrEqual": "WB10.9a17",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.cisa.gov/uscert/ics/advisories/icsa-23-026-03

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.4%

JSON

Related for CVE-2023-24020

prion1 nvd1 cvelist1 ics1