CVE-2023-28386

Snap One OvrC Pro devices versions 7.2 and prior do not validate firmware updates correctly. The device only calculates the MD5 hash of the firmware and does not check using a private-public key mechanism. The lack of complete PKI system firmware signature could allow attackers to upload arbitrary firmware updates, resulting in code execution.

• CWE-354
• CWE-345

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-136-01Third Party Advisory, US Government Resource
• https://www.control4.com/docs/product/ovrc-software/release-notes/english/latest/ovrc-software-release-notes-rev-p.pdfRelease Notes
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-136-01Third Party Advisory, US Government Resource
• https://www.control4.com/docs/product/ovrc-software/release-notes/english/latest/ovrc-software-release-notes-rev-p.pdfRelease Notes

Published

May 22, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-28380Uncontrolled search path for the Intel(R) AI Hackathon softw…8.8
• CVE-2023-28381An OS command injection vulnerability exists in the admin.cg…8.8
• CVE-2023-28382Directory traversal vulnerability in ESS REC Agent Server Ed…8.1
• CVE-2023-28383Improper conditions check in some Intel(R) BIOS PPAM firmwar…6.1
• CVE-2023-28384mySCADA myPRO versions 8.26.0 and prior has parameters which…8.8
• CVE-2023-28385Improper authorization in the Intel(R) NUC Pro Software Suit…6.7
• CVE-2023-28387"NewsPicks" App for Android versions 10.4.5 and earlier and …5.5
• CVE-2023-28388Uncontrolled search path element in some Intel(R) Chipset De…7.8
• CVE-2023-28389Incorrect default permissions in some Intel(R) CSME installe…6.7
• CVE-2023-2839Divide By Zero in GitHub repository gpac/gpac prior to 2.2.2…7.5
• CVE-2023-28390Privilege escalation vulnerability in SR-7100VN firmware Ver…6.8
• CVE-2023-28391A memory corruption vulnerability exists in the HTTP Server …9.8