Vulnerability in Snap One Ovrc Cloud
CVE-2024-50380
Snap One OVRC cloud uses the MAC address as an identifier to provide information when requested. An attacker can impersonate other devices by supplying enumerated MAC addresses and receive sensitive information about the device.
Published · last modified .
EPSS exploit prediction
EPSS: 0.005 (40.6th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 41st percentile — 40.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: +0.000
Affected products
- Snap One Ovrc Cloud — versions 0
Weakness classification (CWE)
References
- www.cisa.gov/news-events/ics-advisories/icsa-23-136-01 (government-resource)