Snap One

14 CVEs across 2 Snap One products. Browse Snap One vulnerabilities, severities, and proof-of-concept exploits.

Snap One products with known CVEs

ProductCVEs
Ovrc Cloud10
Wattbox Wb-300-Ip-34
Snap One CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-503812024-12-02A vulnerability exists in Snap One OVRC cloud where an attacker can impersonate a Hub device and send requests to claim and unclaim devices. The attacker only…
CVE-2024-503802024-12-02Snap One OVRC cloud uses the MAC address as an identifier to provide information when requested. An attacker can impersonate other devices by supplying enumera…
CVE-2023-25183High8.32023-05-22 In Snap One OvrC Pro versions prior to 7.2, when logged into the superuser account, a new functionality appears that could all…
CVE-2023-31245High7.12023-05-22 Devices using Snap One OvrC cloud are sent to a web address when accessing a web management interface using a HTTP connection. Attacke…
CVE-2023-31241High8.62023-05-22Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright.
CVE-2023-31240High8.32023-05-22Snap One OvrC Pro versions prior to 7.2 have their own locally running web server accessible both from the local network and remotely. OvrC cloud contains a hi…
CVE-2023-31193High7.52023-05-22 Snap One OvrC Pro versions prior to 7.3 use HTTP connections when downloading a program from their servers. Because they do not use HTTPS, OvrC Pr…
CVE-2023-28649High8.62023-05-22The Hub in the Snap One OvrC cloud platform is a device used to centralize and manage nested devices connected to it. A vulnerability exists in which an attack…
CVE-2023-28412Medium5.32023-05-22 When supplied with a random MAC address, Snap One OvrC cloud servers will return information about the device. The MAC address of devices can be enume…
CVE-2023-28386High8.62023-05-22Snap One OvrC Pro devices versions 7.2 and prior do not validate firmware updates correctly. The device only calculates the MD5 hash of the firmware and does n…
CVE-2023-23582Medium5.32023-01-30 Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior are vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary c…
CVE-2023-22389Medium5.72023-01-30 Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior store passwords in a plaintext file when the device configuration is exported via Save/Restore–>Back…
CVE-2023-24020High7.52023-01-30 Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior could bypass the brute force protection, allowing multiple attempts to force a login.
CVE-2023-22315Medium6.72023-01-30 Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior use a proprietary local area network (LAN) protocol that does not verify updates to the device. An a…