Vulnerabilities > CVE-2023-31193 - Unspecified vulnerability in Snapone Orvc

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
snapone
NVD
Published: 2023-05-22
Updated: 2024-11-21

Summary

Snap One OvrC Pro versions prior to 7.3 use HTTP connections when downloading a program from their servers. Because they do not use HTTPS, OvrC Pro devices are susceptible to exploitation.

Vulnerable Configurations

Part Description Count
Application
Snapone
12

References