Skip to content
Noroxi

snapone records

11 published records for vendor snapone.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 23
  2. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

11 records
  • CVE-2023-31241
    40Plan

    Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright.

    CriticalCVSS 10.0No exploitEPSS 1%

    snapone · orvcMay 22, 2023

  • CVE-2023-31240
    39Monitor

    Snap One OvrC Pro versions prior to 7.2 have their own locally running web server accessible both from the local network and remotely.

    CriticalCVSS 9.8No exploitEPSS 1%

    snapone · orvcMay 22, 2023

  • CVE-2023-28386
    39Monitor

    Snap One OvrC Pro devices versions 7.2 and prior do not validate firmware updates correctly.

    CriticalCVSS 9.8No exploitEPSS 0%

    snapone · orvcMay 22, 2023

  • CVE-2024-50381
    35Monitor

    Missing Authentication for Critical Function in Snap One OVRC cloud

    HighCVSS 8.8No exploitEPSS 1%

    snap one · ovrc cloudDec 2, 2024

  • CVE-2024-50380
    34Monitor

    Authentication Bypass by Spoofing in Snap One OVRC cloud

    HighCVSS 8.7No exploitEPSS 1%

    snap one · ovrc cloudDec 2, 2024

  • CVE-2023-28649
    30Monitor

    The Hub in the Snap One OvrC cloud platform is a device used to centralize and manage nested devices connected to it.

    HighCVSS 7.5No exploitEPSS 1%

    snapone · orvcMay 22, 2023

  • CVE-2023-31193
    30Monitor

    Snap One OvrC Pro versions prior to 7.3 use HTTP connections when downloading a program from their servers.

    HighCVSS 7.5No exploitEPSS 0%

    snapone · orvcMay 22, 2023

  • CVE-2023-25183
    28Monitor

    In Snap One OvrC Pro versions prior to 7.2, when logged into the superuser account, a new functionality app

    HighCVSS 7.2No exploitEPSS 1%

    snapone · orvcMay 22, 2023

  • CVE-2023-31245
    24Monitor

    Devices using Snap One OvrC cloud are sent to a web address when accessing a web management interface using a HTTP

    MediumCVSS 6.1No exploitEPSS 0%

    snapone · orvcMay 22, 2023

  • CVE-2023-28412
    21Monitor

    When supplied with a random MAC address, Snap One OvrC cloud servers will return information about the device.

    MediumCVSS 5.3No exploitEPSS 0%

    snapone · orvcMay 22, 2023

  • CVE-2014-5615
    21Monitor

    The Snap Secure (aka com.exclaim.snapsecure.app) application 9.5 for Android does not verify X.509 certificates from SSL servers, which allo

    MediumCVSS 5.4No exploitEPSS 0%

    snapone · snap secureSep 8, 2014