Skip to content
OpenAdvisories
High · 8.3 CVE-2023-31240 EUVD-2023-35555GHSA-65fr-gpw6-j777

Snap One OvrC Pro versions prior to 7.2 have their own locally running web server accessible both from the local network and remotely. OvrC…

Published May 22, 2023 · Updated Jan 16, 2025 · Assigned by icscert

Description

Snap One OvrC Pro versions prior to 7.2 have their own locally running web server accessible both from the local network and remotely. OvrC cloud contains a hidden superuser account accessible through hard-coded credentials.

Affected products

VendorProductAffectedFixed
Snap One OvrC Cloud < 7.3 7.3

Advisories 1

References