CVE-2024-50381 — Missing Authentication for Critical Function in Snap One OVRC cloud

CVE-2024-50381

Missing Authentication for Critical Function in Snap One OVRC cloud PUBLISHED

Description (CNA)

A vulnerability exists in Snap One OVRC cloud where an attacker can impersonate a Hub device and send requests to claim and unclaim devices. The attacker only needs to provide the MAC address of the targeted device and can make a request to unclaim it from its original connection and make a request to claim it.

Affected (CNA)

Vendor / product	Versions
Snap One / OVRC cloud	affected 0 before 7.3

CWE

CWE-306

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-136-01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.