by Kastro
Paper/Archive/CVE-2026-41446

CVE-2026-41446

Snap One, LLC WattBox 800 — WattBox 800 & 820 Series < 2.10.0.0 RCE via Diagnostic Endpoints

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
37
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 37.6.377 × 207.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Snap One WattBox 800 and 820 series firmware versions prior to 2.10.0.0 contain undisclosed diagnostic HTTP endpoints that require only the device MAC address and service tag for authentication, both of which are printed in plaintext on the physical device label. Attackers with access to the device label or documentation containing these values can authenticate to the several endpoints and execute arbitrary commands as root on the device.

Affected

ProductAffectedFixed inSource
WattBox 800< 2.10.0.02.10.0.0CNA
WattBox 820< 2.10.0.02.10.0.0CNA

Scores by source

VulnCheck (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
VulnCheck (CNA)9.2CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

patchhelp.snapone.com/wb-8x0-fw/Content/FW%20RN/8x0/8x0%20series%20FW%20RN.htm