Vulnerabilities (CVE)

Filtered by vendor Opto22 Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-40708 1 Opto22 2 Snap Pac S1, Snap Pac S1 Firmware 2023-08-29 N/A 5.3 MEDIUM
The File Transfer Protocol (FTP) port is open by default in the SNAP PAC S1 Firmware version R10.3b. This could allow an adversary to access some device files.
CVE-2020-12046 1 Opto22 1 Softpac Project 2020-05-18 3.5 LOW 5.7 MEDIUM
Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC’s firmware files’ signatures are not verified upon firmware update. This allows an attacker to replace legitimate firmware files with malicious files.
CVE-2020-12042 1 Opto22 1 Softpac Project 2020-05-18 4.0 MEDIUM 6.5 MEDIUM
Opto 22 SoftPAC Project Version 9.6 and prior. Paths specified within the zip files used to update the SoftPAC firmware are not sanitized. As a result, an attacker with user privileges can gain arbitrary file write access with system access.