CVE-2023-31240CWE-1391

Snap One OvrC Pro versions prior to 7.2 have their own locally running web server accessible both from the local network and remotely

High · published May 22, 2023

CVSS v3.1
8.3
EPSS
1%
Percentile
44.6
In the wild
Unconfirmed
What it is

Snap One OvrC Pro versions prior to 7.2 have their own locally running web server accessible both from the local network and remotely. OvrC cloud contains a hidden superuser account accessible through hard-coded credentials.

The record
Technical detail
CVSS v3.1
8.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00539 · 44.6th percentile
Weakness
CWE-1391 · Use of Weak Credentials
Published
2023-05-22T19:58Z
EPSS history
Timeline
  • 22 MAY 19:58Z
    Snap One OvrC Pro versions prior to 7.2 have their own locally running web server accessible both from the local network and remotely
    cvelistv5