İçeriğe atla
Noroxi

snapone kayıtları

snapone üreticisine ait 11 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 23
  2. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

11 kayıt
  • CVE-2023-31241
    40Planlayın

    Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright.

    KritikCVSS 10,0İstismar yokEPSS %1

    snapone · orvc22 May 2023

  • CVE-2023-31240
    39İzleyin

    Snap One OvrC Pro versions prior to 7.2 have their own locally running web server accessible both from the local network and remotely.

    KritikCVSS 9,8İstismar yokEPSS %1

    snapone · orvc22 May 2023

  • CVE-2023-28386
    39İzleyin

    Snap One OvrC Pro devices versions 7.2 and prior do not validate firmware updates correctly.

    KritikCVSS 9,8İstismar yokEPSS %0

    snapone · orvc22 May 2023

  • CVE-2024-50381
    35İzleyin

    Missing Authentication for Critical Function in Snap One OVRC cloud

    YüksekCVSS 8,8İstismar yokEPSS %1

    snap one · ovrc cloud2 Ara 2024

  • CVE-2024-50380
    34İzleyin

    Authentication Bypass by Spoofing in Snap One OVRC cloud

    YüksekCVSS 8,7İstismar yokEPSS %1

    snap one · ovrc cloud2 Ara 2024

  • CVE-2023-28649
    30İzleyin

    The Hub in the Snap One OvrC cloud platform is a device used to centralize and manage nested devices connected to it.

    YüksekCVSS 7,5İstismar yokEPSS %1

    snapone · orvc22 May 2023

  • CVE-2023-31193
    30İzleyin

    Snap One OvrC Pro versions prior to 7.3 use HTTP connections when downloading a program from their servers.

    YüksekCVSS 7,5İstismar yokEPSS %0

    snapone · orvc22 May 2023

  • CVE-2023-25183
    28İzleyin

    In Snap One OvrC Pro versions prior to 7.2, when logged into the superuser account, a new functionality app

    YüksekCVSS 7,2İstismar yokEPSS %1

    snapone · orvc22 May 2023

  • CVE-2023-31245
    24İzleyin

    Devices using Snap One OvrC cloud are sent to a web address when accessing a web management interface using a HTTP

    OrtaCVSS 6,1İstismar yokEPSS %0

    snapone · orvc22 May 2023

  • CVE-2023-28412
    21İzleyin

    When supplied with a random MAC address, Snap One OvrC cloud servers will return information about the device.

    OrtaCVSS 5,3İstismar yokEPSS %0

    snapone · orvc22 May 2023

  • CVE-2014-5615
    21İzleyin

    The Snap Secure (aka com.exclaim.snapsecure.app) application 9.5 for Android does not verify X.509 certificates from SSL servers, which allo

    OrtaCVSS 5,4İstismar yokEPSS %0

    snapone · snap secure8 Eyl 2014