Vulnerability · Published May 22, 2023 · Assigned by icscert
CVE-2023-28412
Medium 5.3
In plain English
A medium-severity security flaw in OvrC Cloud from Snap One. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.5%top 58.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
When supplied with a random MAC address, Snap One OvrC cloud servers will return information about the device. The MAC address of devices can be enumerated in an attack and the OvrC cloud will disclose their information.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Snap One | OvrC Cloud | 0 – before 7.3 |
Weakness: CWE-204 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N