Vulnerabilities (CVE)

Filtered by vendor Opto22 Subscribe
Filtered by product Snap Pac S1 Firmware
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-40707 1 Opto22 2 Snap Pac S1, Snap Pac S1 Firmware 2023-08-29 N/A 7.5 HIGH
There are no requirements for setting a complex password in the built-in web server of the SNAP PAC S1 Firmware version R10.3b, which could allow for a successful brute force attack if users don't set up complex credentials.
CVE-2023-40709 1 Opto22 2 Snap Pac S1, Snap Pac S1 Firmware 2023-08-29 N/A 7.5 HIGH
An adversary could crash the entire device by sending a large quantity of ICMP requests if the controller has the built-in web server enabled but does not have the built-in web server completely set up and configured for the SNAP PAC S1 Firmware version R10.3b