CVE-2024-50381 — Missing Authentication for Critical Function in Snap One OVRC cloud
A vulnerability exists in Snap One OVRC cloud where an attacker can impersonate a Hub device and send requests to claim and unclaim devices. The attacker only needs to provide t…
Published: 2024-12-02 · CVSS: 8.8 · CVSS 4.0
A vulnerability exists in Snap One OVRC cloud where an attacker can impersonate a Hub device and send requests to claim and unclaim devices. The attacker only needs to provide the MAC address of the targeted device and can make a request to unclaim it from its original connection and make a request to claim it.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7