Vulnerability CVE-2023-31193
Published: 2023-05-22

Description:













Snap One OvrC Pro versions prior to 7.3 use HTTP connections when downloading a program from their servers. Because they do not use HTTPS, OvrC Pro devices are susceptible to exploitation.

Type:

CWE-319

 (Cleartext Transmission of Sensitive Information)

 References:
https://www.control4.com/docs/product/ovrc-software/release-notes/english/latest/ovrc-software-release-notes-rev-p.pdf
https://www.cisa.gov/news-events/ics-advisories/icsa-23-136-01
Copyright 2026, cxsecurity.com

 

Back to Top