Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2024-50380

Authentication Bypass by Spoofing in Snap One OVRC cloud

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Snap One OVRC cloud uses the MAC address as an identifier to provide information when requested. An attacker can impersonate other devices by supplying enumerated MAC addresses and receive sensitive information about the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Snap One OVRC cloud

Default version status: unaffected

  • 0 to < 7.3affected

References