Opto22 vulnerabilities
We track 4 vulnerabilities in Opto22 products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 24, 2023.
Latest Opto22 vulnerabilities
- 7.5 High severity
SNAP PAC S1: Uncontrolled Resource Consumption
An adversary could cause a continuous restart loop to the entire device by sending a large quantity of HTTP GET requests if the controller has the built-in web server enabled but does not have the built-in web server completely set up and configured for the SN
- 7.5 High severity
SNAP PAC S1: Uncontrolled Resource Consumption
An adversary could crash the entire device by sending a large quantity of ICMP requests if the controller has the built-in web server enabled but does not have the built-in web server completely set up and configured for the SNAP PAC S1 Firmware version R10.3b
- 7.5 High severity
SNAP PAC S1: Weak Password Requirements
There are no requirements for setting a complex password in the built-in web server of the SNAP PAC S1 Firmware version R10.3b, which could allow for a successful brute force attack if users don't set up complex credentials.
- 9.8 Critical severity
SNAP PAC S1: Improper Restriction of Excessive Authentication Attempts
There is no limit on the number of login attempts in the web server for the SNAP PAC S1 Firmware version R10.3b. This could allow for a brute-force attack on the built-in web server login.