OPTO 22 SNAP PAC S1
Successful exploitation of these vulnerabilities could allow an attacker to brute force passwords, access certain device files, or cause a denial-of-service condition.
beschreibt (5)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-40710US | high7.5 | — | ||
An adversary could cause a continuous restart loop to the entire device by sending a large quantity of HTTP GET requests if the controller has the built-in web server enabled but d… | ||||
| CVE-2023-40709US | high7.5 | — | ||
An adversary could crash the entire device by sending a large quantity of ICMP requests if the controller has the built-in web server enabled but does not have the built-in web ser… | ||||
| CVE-2023-40708US | medium5.3OT erhöht | — | ||
The File Transfer Protocol (FTP) port is open by default in the SNAP PAC S1 Firmware version R10.3b. This could allow an adversary to access some device files. | ||||
| CVE-2023-40707US | high7.5 | — | ||
There are no requirements for setting a complex password in the built-in web server of the SNAP PAC S1 Firmware version R10.3b, which could allow for a successful brute force attac… | ||||
| CVE-2023-40706US | critical9.8 | — | ||
There is no limit on the number of login attempts in the web server for the SNAP PAC S1 Firmware version R10.3b. This could allow for a brute-force attack on the built-in web serve… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-23-236-02 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-236-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (5)
- MitigationSNAP PAC S1 Firmware
Disable the built-in web server when not in use through the Network Security settings within the OPTO 22 Pac Manager software.
- MitigationSNAP PAC S1 Firmware
Disable the built-in web server when not in use through the Network Security settings within the OPTO 22 Pac Manager software.
- MitigationSNAP PAC S1 Firmware
Disable the built-in web server when not in use through the Network Security settings within the OPTO 22 Pac Manager software.
- MitigationSNAP PAC S1 Firmware
Disable the built-in web server when not in use through the Network Security settings within the OPTO 22 Pac Manager software.
- MitigationSNAP PAC S1 Firmware
Disable the built-in web server when not in use through the Network Security settings within the OPTO 22 Pac Manager software.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan