SN
Vendor
Snapone
11
CVEs
0
On KEV
0
New 30D
Products
OR10.0
Orvc
Snapone
9 CVEs0 on KEV0 new
OV8.8
Ovrc-300-pro
Snapone
1 CVEs0 on KEV0 new
SS–
Snap Secure
Snapone
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-50381 | OV Ovrc-300-pro Snapone | 8.8 | Dec 2 | Missing Authentication for Critical Function in Snap One OVRC cloud |
| CVE-2024-50380 | OR Orvc Snapone | 8.7 | Dec 2 | Authentication Bypass by Spoofing in Snap One OVRC cloud |
| CVE-2023-25183 | OR Orvc Snapone | 7.2 | May 22 | In Snap One OvrC Pro versions prior to 7.2, when logged into the superuser account, a new functionality appears that could allow users to execute arbitrary commands on the hub… |
| CVE-2023-31245 | OR Orvc Snapone | 6.1 | May 22 | Devices using Snap One OvrC cloud are sent to a web address when accessing a web management interface using a HTTP connection |
| CVE-2023-31241 | OR Orvc Snapone | 10.0 | May 22 | Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright |
| CVE-2023-31240 | OR Orvc Snapone | 9.8 | May 22 | Snap One OvrC Pro versions prior to 7.2 have their own locally running web server accessible both from the local network and remotely |
| CVE-2023-31193 | OR Orvc Snapone | 7.5 | May 22 | Snap One OvrC Pro versions prior to 7.3 use HTTP connections when downloading a program from their servers |
| CVE-2023-28649 | OR Orvc Snapone | 7.5 | May 22 | The Hub in the Snap One OvrC cloud platform is a device used to centralize and manage nested devices connected to it |
| CVE-2023-28412 | OR Orvc Snapone | 5.3 | May 22 | When supplied with a random MAC address, Snap One OvrC cloud servers will return information about the device |
| CVE-2023-28386 | OR Orvc Snapone | 9.8 | May 22 | Snap One OvrC Pro devices versions 7.2 and prior do not validate firmware updates correctly |
| CVE-2014-5615 | SS Snap Secure Snapone | – | Sep 9 | The Snap Secure (aka com.exclaim.snapsecure.app) application 9.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… |