CVE-2024-50380CWE-290

Authentication Bypass by Spoofing in Snap One OVRC cloud

High · published December 2, 2024

CVSS v4.0
8.7
EPSS
1%
Percentile
42.0
In the wild
Unconfirmed
What it is

Snap One OVRC cloud uses the MAC address as an identifier to provide information when requested. An attacker can impersonate other devices by supplying enumerated MAC addresses and receive sensitive information about the device.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00500 · 42.0th percentile
Weakness
CWE-290 · Authentication Bypass by Spoofing
Published
2024-12-02T16:34Z
EPSS history
Timeline
  • 02 DEC 16:34Z
    Authentication Bypass by Spoofing in Snap One OVRC cloud
    cvelistv5