Vendor/product archive

control4 / ca-10 CVEs

Beta · best-effort

4 CVEs tagged to control4 / ca-10 — 0 Critical, 3 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to control4 vendor archive

CVE-2023-31245

Published May 22, 2023

Devices using Snap One OvrC cloud are sent to a web address when accessing a web management interface using a HTTP connection. Attackers could impersonate a device and supply mali…

CVSS 7.1 · High

Vendor/product tagsBeta · best-effort

CVE-2023-31241

Published May 22, 2023

Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright.

CVSS 8.6 · High

Vendor/product tagsBeta · best-effort

CVE-2023-28412

Published May 22, 2023

When supplied with a random MAC address, Snap One OvrC cloud servers will return information about the device. The MAC address of devices can be enumerated in an attack and the Ov…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2023-28386

Published May 22, 2023

Snap One OvrC Pro devices versions 7.2 and prior do not validate firmware updates correctly. The device only calculates the MD5 hash of the firmware and does not check using a pri…

CVSS 8.6 · High

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1