CVE-2023-23582: Buffer Overflow

Q: What is the severity of CVE-2023-23582?

CVE-2023-23582 is classified as a moderate severity vulnerability that may lead to remote code execution or crashing of the device.

Q: How can I mitigate CVE-2023-23582?

To mitigate CVE-2023-23582, update to the latest version of the Snap One Wattbox WB-300-IP-3 firmware that addresses this vulnerability.

Q: What causes the vulnerability in CVE-2023-23582?

CVE-2023-23582 is caused by a heap-based buffer overflow in Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior.

Q: Who is affected by CVE-2023-23582?

Users of Snap One Wattbox WB-300-IP-3 with firmware versions WB10.9a17 and earlier are affected by CVE-2023-23582.

Q: What kind of attacks can be executed through CVE-2023-23582?

CVE-2023-23582 allows attackers to potentially execute arbitrary code or cause a denial of service by crashing the device.

Published Jan 30, 2023

Updated

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior are vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary code or crash the device remotely.

Affected Software

3 affected components

Snap One Wattbox WB-300-IP-3: versions WB10.9a17 and prior

Snapav Wattbox Wb-300-ip-3 Firmware<=wb10.9a17

Snapav Wattbox Wb-300-ip-3

Remediation

Information

Snap One has released the following updates for the affected products: * Version WB10.B929 https://app.ovrc.com/#/user-settings (login required)

Event History

Jan 30, 2023

CVE Published

via MITRE·10:08 PM

Data Sourced

via MITRE·10:08 PM

RemedyDescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

ICSA-23-026-03

Frequently Asked Questions

What is the severity of CVE-2023-23582?