Devices using Snap One OvrC cloud are sent to a web address when accessing a web management interface using a HTTP connection. Attackers could impersonate a device and supply malicious information about the device’s web server interface. By supplying malicious parameters, an attacker could redirect the user to arbitrary and dangerous locations on the web.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
snapone orvc |
Vulmon