snap_pac_s1 vulnerabilities

2 known vulnerabilities in snap_pac_s1 from Opto22. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  SNAP PAC S1: Weak Password Requirements

  CVE-2023-40707Aug 24, 2023Opto 22

  There are no requirements for setting a complex password in the built-in web server of the SNAP PAC S1 Firmware version R10.3b, which could allow for a successful brute force attack if users don't set up complex credentials.

• 9.8 Critical severity

  SNAP PAC S1: Improper Restriction of Excessive Authentication Attempts

  CVE-2023-40706Aug 24, 2023Opto 22

  There is no limit on the number of login attempts in the web server for the SNAP PAC S1 Firmware version R10.3b. This could allow for a brute-force attack on the built-in web server login.