CVE-2023-31241: Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright.

8.6 CVSS

Description

Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright.

Classification

CVE ID: CVE-2023-31241

CVSS Base Severity: HIGH

CVSS Base Score: 8.6

Affected Products

Vendor: Snap One

Product: OvrC Cloud

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.24% (probability of being exploited)

EPSS Percentile: 61.53% (scored less or equal to compared to others)

EPSS Date: 2025-02-03 (when was this score calculated)

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-136-01

Timeline