Описание
Snap One OvrC Pro versions prior to 7.3 use HTTP connections when downloading a program from their servers. Because they do not use HTTPS, OvrC Pro devices are susceptible to exploitation.
Ссылки
- Third Party AdvisoryUS Government Resource
- Release Notes
- Third Party AdvisoryUS Government Resource
- Release Notes
Уязвимые конфигурации
Конфигурация 1Версия до 7.3.0 (исключая)
cpe:2.3:a:snapone:orvc:*:*:*:*:*:pro:*:*
EPSS
Процентиль: 12%
0.00041
Низкий
7.5 High
CVSS3
Дефекты
CWE-319
Связанные уязвимости
CVSS3: 7.5
github
больше 2 лет назад
Snap One OvrC Pro versions prior to 7.3 use HTTP connections when downloading a program from their servers. Because they do not use HTTPS, OvrC Pro devices are susceptible to exploitation.
EPSS
Процентиль: 12%
0.00041
Низкий
7.5 High
CVSS3
Дефекты
CWE-319