Unauthorized Root Command Execution via Diagnostic HTTP in WattBox Firmware

Executive Summary

Snap One WattBox 800 and 820 series firmware versions prior to 2.10.0.0 have undisclosed diagnostic HTTP endpoints that require only the device MAC address and service tag for authentication.

Both the MAC address and service tag are printed in plaintext on the physical device label, making them easily accessible.

Attackers who obtain these values from the device label or related documentation can authenticate to these endpoints and execute arbitrary commands with root privileges on the device.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows attackers to gain root-level access to affected devices by using easily obtainable authentication information.

With root access, attackers can execute arbitrary commands, potentially leading to full device compromise.

Such compromise could result in unauthorized control, data theft, disruption of device functionality, or use of the device as a foothold for further network attacks.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows attackers to execute arbitrary commands as root on the device by exploiting undisclosed diagnostic HTTP endpoints that require only easily accessible authentication information. Such unauthorized access and control over the device could lead to unauthorized data access, manipulation, or disruption of services.

Consequently, this could impact compliance with common standards and regulations such as GDPR and HIPAA, which mandate strict controls over data confidentiality, integrity, and availability. The ability for attackers to gain root access using publicly available device information may result in violations of these regulations due to potential data breaches or unauthorized system control.

Useful 0 Not Useful 0