CVE-2023-28412

—

CVSS 3.1

5.3 medium

EPSS

<1%p40

Published

May 22, 2023 (May 22, 2023)

Modified

Jun 17, 2026

Description

When supplied with a random MAC address, Snap One OvrC cloud servers will return information about the device. The MAC address of devices can be enumerated in an attack and the OvrC cloud will disclose their information.

Vendors: snapone
Products: orvc
Weakness: CWE-204, CWE-203
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.