CVE-2023-22389

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior store passwords in a plaintext file when the device configuration is exported via Save/Restore–>Backup Settings, which could be read by any user accessing the file.  

Score

CVSS 3.1 6.5 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2023-01-30

Last modified

2025-01-16

Weaknesses

CWE-256

Affected products

• Wattbox Wb-300-ip-3 (Snap One)
• Wattbox Wb-300-ip-3 Firmware (Snapav)

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-03