Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: OPTO 22 Component: Snap Pac S1 Firmware Clear all filters
TI-2023-21495 CVE-2023-40710 · GHSA-4cjc-ff35-f4f5

Resource allocation without limits in OPTO 22 SNAP PAC S1

Priority LOW 34

An adversary could cause a continuous restart loop to the entire device by sending a large quantity of HTTP GET requests if the controller has the built-in web server enabled but does not have the built-in web server com…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00551 Published 2023-08-24 No fix listed CWE-770
TI-2023-21494 CVE-2023-40709 · GHSA-8frv-2qrv-c3x2

Uncontrolled Resource Consumption in OPTO 22 SNAP PAC S1 Built-In Web Server

Priority MEDIUM 40

An adversary could crash the entire device by sending a large quantity of ICMP requests if the controller has the built-in web server enabled but does not have the built-in web server completely set up and configured for…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00551 Published 2023-08-24 No fix listed CWE-770
TI-2023-21493 CVE-2023-40708 · GHSA-g4pv-ghw3-xqxj

Improper Access Control in OPTO 22 SNAP PAC S1

Priority LOW 33

The File Transfer Protocol (FTP) port is open by default in the SNAP PAC S1 Firmware version R10.3b.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00477 Published 2023-08-24 No fix listed CWE-1188
TI-2023-21492 CVE-2023-40707 · GHSA-83ch-r43j-j6qp

Weak password requirements in OPTO 22 SNAP PAC S1 Built-in Web Server

Priority MEDIUM 44

There are no requirements for setting a complex password in the built-in web server of the SNAP PAC S1 Firmware version R10.3b, which could allow for a successful brute force attack if users don't set up complex credenti…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00583 Published 2023-08-24 No fix listed CWE-521