Advisories · Technology
Snap One OVRC cloud.
Every CVE that names Snap One OVRC cloud among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Missing Authentication for Critical Function in Snap One OVRC cloud
- Snap One OVRC cloud
- Authentication bypass
- CVSS 8.7 High
Authentication Bypass by Spoofing in Snap One OVRC cloud
- Snap One OVRC cloud
- Authentication bypass
- CVSS 8.3 High
In Snap One OvrC Pro versions prior to 7.2, when logged into the superuser account, a new functionality appears that could allow users to execute arbitrary commands on the hub device.
- Snap One OvrC Cloud
- CWE-912
- CVSS 8.3 High
Weak credentials in Snap One OvrC Cloud
- Snap One OvrC Cloud
- Hard-coded credentials
- CVSS 7.1 High
Open redirect in Snap One OvrC Cloud
- Snap One OvrC Cloud
- Open redirect
- CVSS 8.6 High
Snap One OvrC Pro devices versions 7.2 and prior do not validate firmware updates correctly.
- Snap One OvrC Cloud
- CWE-354
- CVSS 7.5 High
Cleartext transmission of sensitive information in Snap One OvrC Cloud
- Snap One OvrC Cloud
- Weak cryptography or TLS
- CVSS 8.6 High
Snap One OvrC Cloud: Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements…
- Snap One OvrC Cloud
- CWE-420
- CVSS 5.3 Medium
Snap One OvrC Cloud: When supplied with a random MAC address…
- Snap One OvrC Cloud
- CWE-204
- CVSS 8.6 High
Snap One OvrC Cloud: The Hub in the Snap One OvrC cloud platform is a device used to centralize and manage…
- Snap One OvrC Cloud
- CWE-413