VULNERABILITY INTELLIGENCE
CVE-2024-50381
EPSS probability0.54%
CISA KEVNot currently listed
Published2024-12-02
Last modified2026-06-17
Description
A vulnerability exists in Snap One OVRC cloud where an attacker can impersonate a Hub device and send requests to claim and unclaim devices. The attacker only needs to provide the MAC address of the targeted device and can make a request to unclaim it from its original connection and make a request to claim it.
Weakness classification
- ics-cert@hq.dhs.gov: CWE-306