Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-50381

Missing Authentication for Critical Function in Snap One OVRC cloud

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

A vulnerability exists in Snap One OVRC cloud where an attacker can impersonate a Hub device and send requests to claim and unclaim devices. The attacker only needs to provide the MAC address of the targeted device and can make a request to unclaim it from its original connection and make a request to claim it.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Snap One OVRC cloud

Default version status: unaffected

  • 0 to < 7.3affected

References