Skip to main content

Orvc CVE-2023-28386

CRITICAL
Improper Validation of Integrity Check Value (CWE-354)
2023-05-22 ics-cert@hq.dhs.gov
RCE Orvc
9.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
May 22, 2023 - 20:15 nvd
CRITICAL 9.8

DescriptionNVD

Snap One OvrC Pro devices versions 7.2 and prior do not validate firmware updates correctly. The device only calculates the MD5 hash of the firmware and does not check using a private-public key mechanism. The lack of complete PKI system firmware signature could allow attackers to upload arbitrary firmware updates, resulting in code execution.

AnalysisAI

Snap One OvrC Pro devices versions 7.2 and prior do not validate firmware updates correctly. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-354. Snap One OvrC Pro devices versions 7.2 and prior do not validate firmware updates correctly. The device only calculates the MD5 hash of the firmware and does not check using a private-public key mechanism. The lack of complete PKI system firmware signature could allow attackers to upload arbitrary firmware updates, resulting in code execution. Affected products include: Snapone Orvc.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Orvc

View all
CVE-2023-31241 CRITICAL
10.0 May 22

Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright. Rated
CVE-2023-31240 CRITICAL
9.8 May 22

Snap One OvrC Pro versions prior to 7.2 have their own locally running web server accessible both from the local network
CVE-2023-31193 HIGH
7.5 May 22

Snap One OvrC Pro versions prior to 7.3 use HTTP connections when downloading a program from their servers. Rated high s
CVE-2023-28649 HIGH
7.5 May 22

The Hub in the Snap One OvrC cloud platform is a device used to centralize and manage nested devices connected to it. Ra
CVE-2023-25183 HIGH
7.2 May 22

In Snap One OvrC Pro versions prior to 7.2, when logged into the superuser account, a new functionality appears that cou
CVE-2023-31245 MEDIUM
6.1 May 22

Devices using Snap One OvrC cloud are sent to a web address when accessing a web management interface using a HTTP conne
CVE-2023-28412 MEDIUM
5.3 May 22

When supplied with a random MAC address, Snap One OvrC cloud servers will return information about the device. Rated med

Same weakness CWE-354 – Improper Validation of Integrity Check Value

View all
CVE-2023-48795 MEDIUM POC
5.9
CVE-2024-3596 CRITICAL
9.0
CVE-2023-33668 CRITICAL POC
9.8
CVE-2026-50021 HIGH POC
8.1
CVE-2022-36174 HIGH POC
8.1
CVE-2019-13496 HIGH POC
8.1
CVE-2024-51141 HIGH POC
7.8
CVE-2023-38802 HIGH POC
7.5

Same technique RCE

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2016-4117 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2025-53770 CRITICAL POC
9.8
CVE-2020-7961 CRITICAL POC
9.8

Share

CVE-2023-28386 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy