Description
In Snap One OvrC Pro versions prior to 7.2, when logged into the superuser account, a new functionality appears that could allow users to execute arbitrary commands on the hub device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Snap One | OvrC Cloud | < 7.3 | 7.3 |
Advisories 1
- ICSA-23-136-01 Snap One OvrC Cloud (Update A) CISA ICS & IT advisories · Nov 12, 2024