CVE-2023-31241: Snapone Orvc

Critical severity, CVSS 10.0. EPSS: 0.8% chance of exploitation in the next 30 days.

Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright.

Affected products

• Snapone Orvc: before 7.3.0 (fixed in 7.3.0)

Published 2023-05-22. Last modified 2026-06-17.