Login Request a demo
OR
Product
Orvc
by Snapone · last CVE Dec 2, 2024
9
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 3High 4Medium 2Low 0
Severity
All severities9Critical3High4Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Orvc to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-31241
10.0
1%
May 22
Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright
Affected: before 7.3.0
CVE-2023-31240
9.8
1%
May 22
Snap One OvrC Pro versions prior to 7.2 have their own locally running web server accessible both from the local network and remotely
Affected: before 7.2.0
CVE-2023-28386
9.8
0%
May 22
Snap One OvrC Pro devices versions 7.2 and prior do not validate firmware updates correctly
Affected: before 7.3.0
CVE-2024-50380
8.7
0%
Dec 2
Authentication Bypass by Spoofing in Snap One OVRC cloud
Affected: before 7.3
CVE-2023-31193
7.5
0%
May 22
Snap One OvrC Pro versions prior to 7.3 use HTTP connections when downloading a program from their servers
Affected: before 7.3.0
CVE-2023-28649
7.5
1%
May 22
The Hub in the Snap One OvrC cloud platform is a device used to centralize and manage nested devices connected to it
Affected: before 7.3.0
CVE-2023-25183
7.2
1%
May 22
In Snap One OvrC Pro versions prior to 7.2, when logged into the superuser account, a new functionality appears that could allow users to execute arbitrary commands on the hub…
Affected: before 7.3.0
CVE-2023-31245
6.1
0%
May 22
Devices using Snap One OvrC cloud are sent to a web address when accessing a web management interface using a HTTP connection
Affected: before 7.3.0
CVE-2023-28412
5.3
0%
May 22
When supplied with a random MAC address, Snap One OvrC cloud servers will return information about the device
Affected: before 7.3.0
Showing 9