Vulnerabilities > Snapone > Orvc > Critical
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-05-22 | CVE-2023-31241 | Unprotected Alternate Channel vulnerability in Snapone Orvc Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright. | 10.0 |
| 2023-05-22 | CVE-2023-31240 | Unspecified vulnerability in Snapone Orvc Snap One OvrC Pro versions prior to 7.2 have their own locally running web server accessible both from the local network and remotely. | 9.8 |
| 2023-05-22 | CVE-2023-28386 | Improper Validation of Integrity Check Value vulnerability in Snapone Orvc Snap One OvrC Pro devices versions 7.2 and prior do not validate firmware updates correctly. | 9.8 |