Vulnerabilities > Opto22
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-08-24 | CVE-2023-40706 | Improper Restriction of Excessive Authentication Attempts vulnerability in Opto22 Snap PAC S1 Firmware R10.3B There is no limit on the number of login attempts in the web server for the SNAP PAC S1 Firmware version R10.3b. | 9.8 |
| 2023-08-24 | CVE-2023-40707 | Weak Password Requirements vulnerability in Opto22 Snap PAC S1 Firmware R10.3B There are no requirements for setting a complex password in the built-in web server of the SNAP PAC S1 Firmware version R10.3b, which could allow for a successful brute force attack if users don't set up complex credentials. | 7.5 |
| 2023-08-24 | CVE-2023-40708 | Unspecified vulnerability in Opto22 Snap PAC S1 Firmware R10.3B The File Transfer Protocol (FTP) port is open by default in the SNAP PAC S1 Firmware version R10.3b. | 5.3 |
| 2023-08-24 | CVE-2023-40709 | Resource Exhaustion vulnerability in Opto22 Snap PAC S1 Firmware R10.3B An adversary could crash the entire device by sending a large quantity of ICMP requests if the controller has the built-in web server enabled but does not have the built-in web server completely set up and configured for the SNAP PAC S1 Firmware version R10.3b | 7.5 |
| 2023-08-24 | CVE-2023-40710 | Resource Exhaustion vulnerability in Opto22 Snap PAC S1 Firmware R10.3B An adversary could cause a continuous restart loop to the entire device by sending a large quantity of HTTP GET requests if the controller has the built-in web server enabled but does not have the built-in web server completely set up and configured for the SNAP PAC S1 Firmware version R10.3b | 7.5 |
| 2020-05-14 | CVE-2020-12046 | Improper Verification of Cryptographic Signature vulnerability in Opto22 Softpac Project 9.6 Opto 22 SoftPAC Project Version 9.6 and prior. | 3.5 |
| 2020-05-14 | CVE-2020-12042 | Improper Verification of Cryptographic Signature vulnerability in Opto22 Softpac Project 9.6 Opto 22 SoftPAC Project Version 9.6 and prior. | 4.0 |
| 2020-05-14 | CVE-2020-10620 | Missing Authorization vulnerability in Opto22 Softpac Project 9.6 Opto 22 SoftPAC Project Version 9.6 and prior. | 7.5 |
| 2020-05-14 | CVE-2020-10616 | Uncontrolled Search Path Element vulnerability in Opto22 Softpac Project 9.6 Opto 22 SoftPAC Project Version 9.6 and prior. | 6.8 |
| 2020-05-14 | CVE-2020-10612 | Missing Authorization vulnerability in Opto22 Softpac Project 9.6 Opto 22 SoftPAC Project Version 9.6 and prior. | 6.4 |