CVE-2024-50380
Authentication Bypass by Spoofing in Snap One OVRC cloud
- State
- Published
- Severity
- 8.7 High
- Published
- Dec 2, 2024
- Updated
- Dec 2, 2024
- Reserved
- Oct 23, 2024
Description
Snap One OVRC cloud uses the MAC address as an identifier to provide information when requested. An attacker can impersonate other devices by supplying enumerated MAC addresses and receive sensitive information about the device.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N | icscert |
Weaknesses
- CWE-290 Authentication Bypass by Spoofing
Affected Products
| Product | Versions |
|---|---|
OVRC cloudSnap One |
|
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-136-01government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.