Skip to content
OpenAdvisories

Vendor

Opto 22

10 known vulnerabilities.

4 results · Clear filters · Feed

  • Medium 6.2

    Command Injection in Opto22 Groov REST API

    A vulnerability exists in the Opto22 Groov Manage REST API on GRV-EPIC and groov RIO Products that allows remote code execution with root privileges. When a POST request is executed against the vulnerable endpoint, the application reads certain header details…

  • Medium 6.8

    An adversary could cause a continuous restart loop to the entire device by sending a large quantity of HTTP GET request…

  • Medium 6.8

    Uncontrolled Resource Consumption in OPTO 22 SNAP PAC S1 Built-In Web Server

    An adversary could crash the entire device by sending a large quantity of ICMP requests if the controller has the built-in web server enabled but does not have the built-in web server completely set up and configured for the SNAP PAC S1 Firmware version R10.3b

  • Medium 5.8

    Improper Access Control in OPTO 22 SNAP PAC S1

    The File Transfer Protocol (FTP) port is open by default in the SNAP PAC S1 Firmware version R10.3b. This could allow an adversary to access some device files.