Skip to content
OpenAdvisories

Vendor

Opto 22

10 known vulnerabilities.

Products

SNAP PAC S1 5 PAC Project Professional 2 PAC Project Basic 2 PAC Display Basic 2 PAC Display Professional 2 OptoOPCServer 2 OptoDataLink 2 PAC Control Basic and PAC Control Professional 1 GRV-EPIC-PR1 1 GRV-EPIC-PR2 1 groov RIO GRV-R7-MM1001-10 1 groov RIO GRV-R7-MM2001-10 1 groov RIO GRV-R7-I1VAPM-3 1 groov View Server 1 GRV-EPIC-PR1 Firmware 1 GRV-EPIC-PR2 Firmware 1 groov RIO GRV-R7-MM1001-10 Firmware 0 groov RIO GRV-R7-MM2001-10 Firmware 0 groov RIO GRV-R7-I1VAPM-3 Firmware 0 groov View Server for Windows 0 SoftPAC Project 0 SNAP PAC S1 Firmware 0 PAC Control Basic Versions 0 PAC Control Professional 0
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.6
    CVE-2025-13084

    Opto 22 groov View Exposure of Sensitive Information Through Metadata

    The users endpoint in the groov View API returns a list of all users and associated metadata including their API keys. This endpoint requires an Editor role to access and will display API keys for all users, including Administrators.

    Opto 22 GRV-EPIC-PR1 Firmware groov View Server GRV-EPIC-PR2 Firmware
  • High 8.6
    CVE-2023-40707

    Weak password requirements in OPTO 22 SNAP PAC S1 Built-in Web Server

    There are no requirements for setting a complex password in the built-in web server of the SNAP PAC S1 Firmware version R10.3b, which could allow for a successful brute force attack if users don't set up complex credentials.

    Opto 22 SNAP PAC S1
  • High 8.6
    CVE-2023-40706

    Improper Restriction of Excessive Authentication Attempts in OPTO 22 SNAP PAC S1 Built-in Web Server

    There is no limit on the number of login attempts in the web server for the SNAP PAC S1 Firmware version R10.3b. This could allow for a brute-force attack on the built-in web server login.

    Opto 22 SNAP PAC S1