CVE-2023-31245

Devices using Snap One OvrC cloud are sent to a web address when accessing a web management interface using a HTTP connection. Attackers could impersonate a device and supply malicious information about the device’s web server interface. By supplying malicious parameters, an attacker could redirect the user to arbitrary and dangerous locations on the web.

• CWE-601

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-136-01Third Party Advisory, US Government Resource
• https://www.control4.com/docs/product/ovrc-software/release-notes/english/latest/ovrc-software-release-notes-rev-p.pdfRelease Notes
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-136-01Third Party Advisory, US Government Resource
• https://www.control4.com/docs/product/ovrc-software/release-notes/english/latest/ovrc-software-release-notes-rev-p.pdfRelease Notes

Published

May 22, 2023

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-31239Stack-based buffer overflow vulnerability in V-Server v4.0.1…7.8
• CVE-2023-3124The Elementor Pro plugin for WordPress is vulnerable to unau…8.8
• CVE-2023-31240Snap One OvrC Pro versions prior to 7.2 have their own local…9.8
• CVE-2023-31241Snap One OvrC cloud servers contain a route an attacker can …10
• CVE-2023-31242An authentication bypass vulnerability exists in the OAS Eng…9.8
• CVE-2023-31244 The affected product does not properly va…7.8
• CVE-2023-31246Incorrect default permissions in some Intel(R) SDP Tool soft…7.8
• CVE-2023-31247A memory corruption vulnerability exists in the HTTP Server …9.8
• CVE-2023-31248Linux Kernel nftables Use-After-Free Local Privilege Escalat…7.8
• CVE-2023-3125The B2BKing plugin for WordPress is vulnerable to unauthoriz…6.5
• CVE-2023-31250The file download facility doesn't sufficiently sanitize fil…6.5
• CVE-2023-3126The B2BKing plugin for WordPress is vulnerable to unauthoriz…4.3