Design/Logic Flaw

2023-05-2220:15:00

PRIOn knowledge base

www.prio-n.com

snap one ovrc

vulnerability

impersonation

unauthorized device requests

centralized management

nested devices

security flaw

7.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.1%

JSON

The Hub in the Snap One OvrC cloud platform is a device used to centralize and manage nested devices connected to it. A vulnerability exists in which an attacker could impersonate a hub and send device requests to claim already claimed devices. The OvrC cloud platform receives the requests but does not validate if the found devices are already managed by another user.