CVE-2023-28412CWE-204

When supplied with a random MAC address, Snap One OvrC cloud servers will return information about the device

Medium · published May 22, 2023

CVSS v3.1
5.3
EPSS
0%
Percentile
40.6
In the wild
Unconfirmed
What it is

When supplied with a random MAC address, Snap One OvrC cloud servers will return information about the device. The MAC address of devices can be enumerated in an attack and the OvrC cloud will disclose their information.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00482 · 40.6th percentile
Weakness
CWE-204 · Observable Response Discrepancy
Published
2023-05-22T19:24Z
EPSS history
Timeline
  • 22 MAY 19:24Z
    When supplied with a random MAC address, Snap One OvrC cloud servers will return information about the device
    cvelistv5