Read the docs

OPTO 22

Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

OPTO 22 records in CISA KEV

No OPTO 22 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Snap Pac S1 Firmware 5 records MEDIUM Softpac Project 5 records MEDIUM Optodatalink 2 records MEDIUM Optoopcserver 2 records MEDIUM Pac Display 2 records MEDIUM Pac Project 2 records MEDIUM Pac Control 1 record MEDIUM

Records

5 records in Snap Pac S1 Firmware · all components

TI-2023-21492 CVE-2023-40707 · GHSA-83ch-r43j-j6qp

Weak password requirements in OPTO 22 SNAP PAC S1 Built-in Web Server

Priority MEDIUM 44

There are no requirements for setting a complex password in the built-in web server of the SNAP PAC S1 Firmware version R10.3b, which could allow for a successful brute force attack if users don't set up complex credenti…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00583 Published 2023-08-24 No fix listed CWE-521
TI-2023-21494 CVE-2023-40709 · GHSA-8frv-2qrv-c3x2

Uncontrolled Resource Consumption in OPTO 22 SNAP PAC S1 Built-In Web Server

Priority MEDIUM 40

An adversary could crash the entire device by sending a large quantity of ICMP requests if the controller has the built-in web server enabled but does not have the built-in web server completely set up and configured for…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00551 Published 2023-08-24 No fix listed CWE-770
TI-2023-21495 CVE-2023-40710 · GHSA-4cjc-ff35-f4f5

Resource allocation without limits in OPTO 22 SNAP PAC S1

Priority LOW 34

An adversary could cause a continuous restart loop to the entire device by sending a large quantity of HTTP GET requests if the controller has the built-in web server enabled but does not have the built-in web server com…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00551 Published 2023-08-24 No fix listed CWE-770
TI-2023-21493 CVE-2023-40708 · GHSA-g4pv-ghw3-xqxj

Improper Access Control in OPTO 22 SNAP PAC S1

Priority LOW 33

The File Transfer Protocol (FTP) port is open by default in the SNAP PAC S1 Firmware version R10.3b.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00477 Published 2023-08-24 No fix listed CWE-1188
Open these records in search →