Browse CVEs

HIGH 7.2 CVE-2023-25183 In Snap One OvrC Pro versions prior to 7.2, when logged into the superuser account, a new functionality appears that could allow users to execute arb… Orvc 7.3.0+ Fix from $1,9502023-05-22 CRITICAL 10.0 CVE-2023-31241 Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright. Orvc 7.3.0+ Fix from $2,3002023-05-22 CRITICAL 9.8 CVE-2023-28386 Snap One OvrC Pro devices versions 7.2 and prior do not validate firmware updates correctly. The device only calculates the MD5 hash of the firmware … Orvc 7.3.0+ Fix from $2,3002023-05-22 CRITICAL 9.8 CVE-2023-31240 Snap One OvrC Pro versions prior to 7.2 have their own locally running web server accessible both from the local network and remotely. OvrC cloud con… Orvc 7.2.0+ Fix from $2,3002023-05-22 HIGH 7.5 CVE-2023-28649 The Hub in the Snap One OvrC cloud platform is a device used to centralize and manage nested devices connected to it. A vulnerability exists in which… Orvc 7.3.0+ Fix from $1,9502023-05-22 HIGH 7.5 CVE-2023-31193 Snap One OvrC Pro versions prior to 7.3 use HTTP connections when downloading a program from their servers. Because they do not use HTTPS, OvrC Pro d… Orvc 7.3.0+ Fix from $1,9502023-05-22 MEDIUM 6.1 CVE-2023-31245 Devices using Snap One OvrC cloud are sent to a web address when accessing a web management interface using a HTTP connection. Attackers could impers… Orvc 7.3.0+ Fix from $1,6002023-05-22 MEDIUM 5.3 CVE-2023-28412 When supplied with a random MAC address, Snap One OvrC cloud servers will return information about the device. The MAC address of devices can be enum… Orvc 7.3.0+ Fix from $1,6002023-05-22 MEDIUM 5.4 CVE-2014-5615 The Snap Secure (aka com.exclaim.snapsecure.app) application 9.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in… Snap Secure Mitigation only Fix from $1,6002014-09-09