CVE-2023-25183

High

In Snap One OvrC Pro versions prior to 7.2, when logged into the superuser account, a new functionality…

icscert·CWE-912·Published 2023-05-22

CVSS

7.2

EPSS

0.01

KEV

Exploits

cve.orgen

238 chars

In Snap One OvrC Pro versions prior to 7.2, when logged into the superuser account, a new functionality appears that could allow users to execute arbitrary commands on the hub device.

NVDen

238 chars

In Snap One OvrC Pro versions prior to 7.2, when logged into the superuser account, a new functionality appears that could allow users to execute arbitrary commands on the hub device.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	8.3	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
3.1	Primary	NVD	7.2	1.2	5.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H