Skip to content
OpenAdvisories
High · 8.6 CVE-2023-40707 EUVD-2023-45262GHSA-83ch-r43j-j6qp

Weak password requirements in OPTO 22 SNAP PAC S1 Built-in Web Server

Published Aug 24, 2023 · Updated Oct 2, 2024 · Assigned by Dragos

Description

There are no requirements for setting a complex password in the built-in web server of the SNAP PAC S1 Firmware version R10.3b, which could allow for a successful brute force attack if users don't set up complex credentials.

Affected products

VendorProductAffectedFixed
OPTO 22 SNAP PAC S1 R10.3b —

Advisories 1

References