PatchTheCVEsnapav vulnerabilities
Recent CVEs affecting snapav products. 4 tracked.
snapav has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2023-01-30. Highest priority: CVE-2023-24020 (score 44/100).
- CVE-2023-24020 HIGH 7.5 UPGRADE Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior could bypass the brute force protection, allowing m
- CVE-2023-23582 MEDIUM 5.3 UPGRADE Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior are vulnerable to a heap-based buffer overflow, whi
- CVE-2023-22389 MEDIUM 5.7 UPGRADE Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior store passwords in a plaintext file when the device
- CVE-2023-22315 MEDIUM 6.7 UPGRADE Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior use a proprietary local area network (LAN) protocol
FAQ
How do I fix snapav vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is snapav being exploited right now?
None of the tracked snapav CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which snapav CVE should I patch first?
CVE-2023-24020 currently ranks highest (44/100): Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior could bypass the brute force protection, allowing m.