When supplied with a random MAC address, Snap One OvrC cloud servers will return information about the device. The MAC address of devices can be enumerated in an attack and the OvrC cloud will disclose their information.

Related CVEs

CVE-2023-28412

Key Information

GHSA ID

GHSA-258m-ggv2-xxv3

Published

May 22, 2023 9:30 PM

Last Modified

April 4, 2024 4:16 AM

CVSS Score

5.0 /10

Primary Ecosystem

Unknown

Primary Package

Unknown

GitHub Reviewed

✗ No

Dataset

Last updated: July 13, 2025 6:28 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.