CVE-2023-22315

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior use a proprietary local area network (LAN) protocol that does not verify updates to the device. An attacker could upload a malformed update file to the device and execute arbitrary code.

• CWE-345

• https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-03Third Party Advisory, US Government Resource
• https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-03Third Party Advisory, US Government Resource

Published

Jan 30, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-2231A vulnerability, which was classified as critical, was found…9.8
• CVE-2023-22310Race condition in some Intel(R) Aptio* V UEFI Firmware Integ…4.7
• CVE-2023-22311Improper access control in some Intel(R) Optane(TM) PMem 100…7.8
• CVE-2023-22312Improper access control for some Intel(R) NUC BIOS firmware …7.8
• CVE-2023-22313Improper buffer restrictions in some Intel(R) QAT Library so…2.3
• CVE-2023-22314Use after free vulnerability exists in CX-Programmer Ver.9.7…7.8
• CVE-2023-22316Hidden functionality vulnerability in PIX-RT100 versions RT1…6.5
• CVE-2023-22317Use after free vulnerability exists in CX-Programmer Ver.9.7…7.8
• CVE-2023-22318Denial of service in Webconf in Tribe29 Checkmk Appliance be…7.5
• CVE-2023-22319A sql injection vulnerability exists in the requestHandlers.…9.8
• CVE-2023-2232An issue has been discovered in GitLab affecting all version…6.5
• CVE-2023-22320OpenAM Web Policy Agent (OpenAM Consortium Edition) provided…7.5