CVE-2023-31245
Devices using Snap One OvrC cloud are sent to a web address when accessing a web management interface using a HTTP connection. Attackers could impersona…
Published: 2023-05-22 · CVSS: 7.1 · CVSS 3.1
Devices using Snap One OvrC cloud are sent to a web address when accessing a web management interface using a HTTP connection. Attackers could impersonate a device and supply malicious information about the device’s web server interface. By supplying malicious parameters, an attacker could redirect the user to arbitrary and dangerous locations on the web.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7