CVE-2023-31245

MEDIUM

6.1

CVSS Score

Published: May 22, 2023 at 07:37 PM UTC

Updated: June 17, 2026 at 05:56 AM UTC

8 products affected across 1 vendorOrvcOVRC-300-PROAn-110-Rt-2L1W-Wifi· also runs on 5 platforms

Using OvrC Cloud by Snap One?

Get instant alerts when new vulnerabilities affect OvrC Cloud - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.1

Exploit prediction

EPSS 0.4%

SSVC

No known exploit

Description

Devices using Snap One OvrC cloud are sent to a web address when accessing a web management interface using a HTTP connection. Attackers could impersonate a device and supply malicious information about the device’s web server interface. By supplying malicious parameters, an attacker could redirect the user to arbitrary and dangerous locations on the web.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Orvc · Snapone

95%

v < 7.3v < 7.3.0

Affected range stops below 7.3, so it looks safe — our inference, not a vendor statement

Affected range stops below 7.3.0, so it looks safe — our inference, not a vendor statement

control4-ca-1 (environment) · control4-ca-10 (environment) · control4-ea-1 (environment) · control4-ea-3 (environment) · control4-ea-5 (environment) · snapone-an-110-rt-2l1w (environment) · snapone-an-110-rt-2l1w-wifi (environment) · snapone-an-310-rt-4l2w (environment) · snapone-ovrc-300-pro (environment) · snapone-pakedge-rk-1 (environment) · snapone-pakedge-rt-3100 (environment) · snapone-pakedge-wr-1 (environment)

An-110-Rt-2L1W · Snaponedevice

80%

All versions

An-110-Rt-2L1W-Wifi · Snaponedevice

80%

All versions

An-310-Rt-4L2W · Snaponedevice

80%

All versions

OVRC-300-PRO · Snaponedevice

80%

All versions