Lucene search
HistoryMay 22, 2023 - 8:15 p.m.
CVE-2023-28412
cve-2023-28412
snap one ovrc
mac address enumeration
device information disclosure
security vulnerability
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
5.7
Confidence
High
EPSS
0.001
Percentile
43.7%
When supplied with a random MAC address, Snap One OvrC cloud servers will return information about the device. The MAC address of devices can be enumerated in an attack and the OvrC cloud will disclose their information.
Affected configurations
Node
snaponeorvcRange<7.3.0pro
control4ca-1Match-
ORcontrol4ca-10Match-
ORcontrol4ea-1Match-
ORcontrol4ea-3Match-
ORcontrol4ea-5Match-
ORsnaponean-110-rt-2l1wMatch-
ORsnaponean-110-rt-2l1w-wifiMatch-
ORsnaponean-310-rt-4l2wMatch-
ORsnaponeovrc-300-proMatch-
ORsnaponepakedge_rk-1Match-
ORsnaponepakedge_rt-3100Match-
ORsnaponepakedge_wr-1Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| snapone | orvc | * | cpe:2.3:a:snapone:orvc:*:*:*:*:*:pro:*:* |
| control4 | ca-1 | - | cpe:2.3:h:control4:ca-1:-:*:*:*:*:*:*:* |
| control4 | ca-10 | - | cpe:2.3:h:control4:ca-10:-:*:*:*:*:*:*:* |
| control4 | ea-1 | - | cpe:2.3:h:control4:ea-1:-:*:*:*:*:*:*:* |
| control4 | ea-3 | - | cpe:2.3:h:control4:ea-3:-:*:*:*:*:*:*:* |
| control4 | ea-5 | - | cpe:2.3:h:control4:ea-5:-:*:*:*:*:*:*:* |
| snapone | an-110-rt-2l1w | - | cpe:2.3:h:snapone:an-110-rt-2l1w:-:*:*:*:*:*:*:* |
| snapone | an-110-rt-2l1w-wifi | - | cpe:2.3:h:snapone:an-110-rt-2l1w-wifi:-:*:*:*:*:*:*:* |
| snapone | an-310-rt-4l2w | - | cpe:2.3:h:snapone:an-310-rt-4l2w:-:*:*:*:*:*:*:* |
| snapone | ovrc-300-pro | - | cpe:2.3:h:snapone:ovrc-300-pro:-:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2023-28412
2023-05-22 20:15:10
cvelist
cvelist
CVE-2023-28412
2023-05-22 19:24:06
prion
prion
Information disclosure
2023-05-22 20:15:00
ics
ics
Snap One OvrC Cloud
2023-05-16 12:00:00
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
5.7
Confidence
High
EPSS
0.001
Percentile
43.7%
Related for NVD:CVE-2023-28412