Lucene search

IcscertCVE-2023-28386

HistoryMay 22, 2023 - 8:15 p.m.

CVE-2023-28386

2023-05-2220:15:10

CWE-345

icscert

web.nvd.nist.gov

cve-2023-28386

snap one

ovrc pro

firmware

vulnerability

code execution

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.004

Percentile

73.6%

JSON

Snap One OvrC Pro devices versions 7.2 and prior do not validate firmware updates correctly. The device only calculates the MD5 hash of the firmware and does not check using a private-public key mechanism. The lack of complete PKI system firmware signature could allow attackers to upload arbitrary firmware updates, resulting in code execution.

Affected configurations

Nvd

Node

control4ca-1Match-

control4ca-10Match-

control4ea-1Match-

control4ea-3Match-

control4ea-5Match-

snaponean-110-rt-2l1wMatch-

snaponean-110-rt-2l1w-wifiMatch-

snaponean-310-rt-4l2wMatch-

snaponeovrc-300-proMatch-

snaponepakedge_rk-1Match-

snaponepakedge_rt-3100Match-

snaponepakedge_wr-1Match-

AND

snaponeorvcRange<7.3.0pro

VendorProductVersionCPE
control4ca-1-cpe:2.3:h:control4:ca-1:-:*:*:*:*:*:*:*
control4ca-10-cpe:2.3:h:control4:ca-10:-:*:*:*:*:*:*:*
control4ea-1-cpe:2.3:h:control4:ea-1:-:*:*:*:*:*:*:*
control4ea-3-cpe:2.3:h:control4:ea-3:-:*:*:*:*:*:*:*
control4ea-5-cpe:2.3:h:control4:ea-5:-:*:*:*:*:*:*:*
snaponean-110-rt-2l1w-cpe:2.3:h:snapone:an-110-rt-2l1w:-:*:*:*:*:*:*:*
snaponean-110-rt-2l1w-wifi-cpe:2.3:h:snapone:an-110-rt-2l1w-wifi:-:*:*:*:*:*:*:*
snaponean-310-rt-4l2w-cpe:2.3:h:snapone:an-310-rt-4l2w:-:*:*:*:*:*:*:*
snaponeovrc-300-pro-cpe:2.3:h:snapone:ovrc-300-pro:-:*:*:*:*:*:*:*
snaponepakedge_rk-1-cpe:2.3:h:snapone:pakedge_rk-1:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
control4	ca-1	-	cpe:2.3:h:control4:ca-1:-:::::::*
control4	ca-10	-	cpe:2.3:h:control4:ca-10:-:::::::*
control4	ea-1	-	cpe:2.3:h:control4:ea-1:-:::::::*
control4	ea-3	-	cpe:2.3:h:control4:ea-3:-:::::::*
control4	ea-5	-	cpe:2.3:h:control4:ea-5:-:::::::*
snapone	an-110-rt-2l1w	-	cpe:2.3:h:snapone:an-110-rt-2l1w:-:::::::*
snapone	an-110-rt-2l1w-wifi	-	cpe:2.3:h:snapone:an-110-rt-2l1w-wifi:-:::::::*
snapone	an-310-rt-4l2w	-	cpe:2.3:h:snapone:an-310-rt-4l2w:-:::::::*
snapone	ovrc-300-pro	-	cpe:2.3:h:snapone:ovrc-300-pro:-:::::::*
snapone	pakedge_rk-1	-	cpe:2.3:h:snapone:pakedge_rk-1:-:::::::*

Rows per page:

1-10 of 131

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "OvrC Cloud",
    "vendor": "Snap One",
    "versions": [
      {
        "lessThan": "7.3",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.cisa.gov/news-events/ics-advisories/icsa-23-136-01

www.control4.com/docs/product/ovrc-software/release-notes/english/latest/ovrc-software-release-notes-rev-p.pdf

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.004

Percentile

73.6%

JSON

Related for CVE-2023-28386