Opto22
Opto22 Snap PAC S1 Firmware: vulnerabilidades y CVE
Opto22 Snap PAC S1 Firmware tiene 5 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE5
Últimos 12 meses0
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-40710 | Alta (7.5) | 0.55% | — | 24 ago 2023 | An adversary could cause a continuous restart loop to the entire device by sending a large quantity of HTTP GET requests if the controller has the built-in web server enabled but does not have the built-in web server… |
| CVE-2023-40709 | Alta (7.5) | 0.55% | — | 24 ago 2023 | An adversary could crash the entire device by sending a large quantity of ICMP requests if the controller has the built-in web server enabled but does not have the built-in web server completely set up and configured… |
| CVE-2023-40708 | Media (5.3) | 0.48% | — | 24 ago 2023 | The File Transfer Protocol (FTP) port is open by default in the SNAP PAC S1 Firmware version R10.3b. This could allow an adversary to access some device files. |
| CVE-2023-40707 | Alta (7.5) | 0.58% | — | 24 ago 2023 | There are no requirements for setting a complex password in the built-in web server of the SNAP PAC S1 Firmware version R10.3b, which could allow for a successful brute force attack if users don't set up complex… |
| CVE-2023-40706 | Crítica (9.8) | 0.67% | — | 24 ago 2023 | There is no limit on the number of login attempts in the web server for the SNAP PAC S1 Firmware version R10.3b. This could allow for a brute-force attack on the built-in web server login. |