CVE-2023-31241

Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright...

CVE-2023-31241

Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright...

CVE-2023-31241

Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright...

CVE-2023-31241

CVE-2023-31241 affects Snap One OvrC cloud services (OvrC Pro/Connect). The issue is an access-control route that lets an attacker bypass requirements and claim unclaimed devices by bypassing the serial-number check. Root cause: improper access controls/identity checks in the device-to-cloud inte...