Snap One vulnerabilities

CVEs per yearBy the year they were published

1. 202312
2. 20242

Newest CVEs

• CVE-2024-50381

  Missing Authentication for Critical Function in Snap One OVRC cloud

  Snap One · OVRC cloud

  High8.8
• CVE-2024-50380

  Authentication Bypass by Spoofing in Snap One OVRC cloud

  Snap One · OVRC cloud

  High8.7
• CVE-2023-25183

  In Snap One OvrC Pro versions prior to 7.2, when logged into the superuser account, a new functionality appears that could allow users to execute arbitrary…

  Snap One · OvrC Cloud

  High8.3
• CVE-2023-31240

  Snap One OvrC Pro versions prior to 7.2 have their own locally running web server accessible both from the local network and remotely. OvrC cloud contains a…

  Snap One · OvrC Cloud

  High8.3
• CVE-2023-31245

  Devices using Snap One OvrC cloud are sent to a web address when accessing a web management interface using a HTTP connection. Attackers could impersonate a…

  Snap One · OvrC Cloud

  High7.1
• CVE-2023-28386

  Snap One OvrC Pro devices versions 7.2 and prior do not validate firmware updates correctly. The device only calculates the MD5 hash of the firmware and does…

  Snap One · OvrC Cloud

  High8.6
• CVE-2023-31193

  Snap One OvrC Pro versions prior to 7.3 use HTTP connections when downloading a program from their servers. Because they do not use HTTPS, OvrC Pro devices are…

  Snap One · OvrC Cloud

  High7.5
• CVE-2023-31241

  Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright.

  Snap One · OvrC Cloud

  High8.6
• CVE-2023-28412

  When supplied with a random MAC address, Snap One OvrC cloud servers will return information about the device. The MAC address of devices can be enumerated in…

  Snap One · OvrC Cloud

  Medium5.3
• CVE-2023-28649

  The Hub in the Snap One OvrC cloud platform is a device used to centralize and manage nested devices connected to it. A vulnerability exists in which an…

  Snap One · OvrC Cloud

  High8.6