Vulnerability · Published May 22, 2023 · Assigned by icscert
CVE-2023-31240
High 8.3
In plain English
A high-severity security flaw in OvrC Cloud from Snap One. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 46% of all known vulnerabilities).
Severity (CVSS 3.1)8.3High
Exploit odds (30 days)0.5%top 54.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Snap One OvrC Pro versions prior to 7.2 have their own locally running web server accessible both from the local network and remotely. OvrC cloud contains a hidden superuser account accessible through hard-coded credentials.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Snap One | OvrC Cloud | 0 – before 7.3 |
Weakness: CWE-1391 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L