CVE-2023-40708
Improper Access Control in OPTO 22 SNAP PAC S1
- State
- Published
- Severity
- 5.8 Medium
- Published
- Aug 24, 2023
- Updated
- Oct 2, 2024
- Reserved
- Aug 18, 2023
Description
The File Transfer Protocol (FTP) port is open by default in the SNAP PAC S1 Firmware version R10.3b. This could allow an adversary to access some device files.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.8 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N | Dragos |
Weaknesses
- CWE-1188 Insecure Default Initialization of Resource
Affected Products
| Product | Versions |
|---|---|
SNAP PAC S1OPTO 22 |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.