CVE-2023-31240

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Snap One OvrC Pro versions prior to 7.2 have their own locally running web server accessible both from the local network and remotely. OvrC cloud contains a hidden superuser account accessible through hard-coded credentials.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-1391

Affected software

Vendor	Product	Versions
Snap One	OvrC Cloud	< 7.3

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-136-01Third Party Advisory, US Government Resource
https://www.control4.com/docs/product/ovrc-software/release-notes/english/latest/ovrc-software-release-notes-rev-r.pdfRelease Notes
https://www.cisa.gov/news-events/ics-advisories/icsa-23-136-01Third Party Advisory, US Government Resource
https://www.control4.com/docs/product/ovrc-software/release-notes/english/latest/ovrc-software-release-notes-rev-r.pdfRelease Notes

Timeline

Published: May 22, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-3124110.0Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright.CVE-2023-312429.8An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v18.00.0072. A specia CVE-2023-312447.8The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could ex CVE-2023-312456.1Devices using Snap One OvrC cloud are sent to a web address when accessing a web management interface using a HTTP connection. Attackers cou CVE-2023-312467.8Incorrect default permissions in some Intel(R) SDP Tool software before version 1.4 build 5 may allow an authenticated user to potentially e CVE-2023-312479.8A memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of Weston Embedded uC-HTTP v3.01.01. A special CVE-2023-312487.8Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was CVE-2023-31256.5The B2BKing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'b2bking_save_p CVE-2023-312506.5The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to privat CVE-2023-31264.3The B2BKing plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'b2bkingdownloadprice CVE-2023-31279.8An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights.CVE-2023-312717.8Improper access control in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escal