CVE-2023-28649CWE-413

The Hub in the Snap One OvrC cloud platform is a device used to centralize and manage nested devices connected to it

High · published May 22, 2023

CVSS v3.1
8.6
EPSS
1%
Percentile
43.1
In the wild
Unconfirmed
What it is

The Hub in the Snap One OvrC cloud platform is a device used to centralize and manage nested devices connected to it. A vulnerability exists in which an attacker could impersonate a hub and send device requests to claim already claimed devices. The OvrC cloud platform receives the requests but does not validate if the found devices are already managed by another user.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00517 · 43.1th percentile
Weakness
CWE-413 · Improper Resource Locking
Published
2023-05-22T19:10Z
EPSS history
Timeline
  • 22 MAY 19:10Z
    The Hub in the Snap One OvrC cloud platform is a device used to centralize and manage nested devices connected to it
    cvelistv5