Vulnerability · Published Aug 24, 2023 · Assigned by Dragos
CVE-2023-40708Improper Access Control in OPTO 22 SNAP PAC S1
Medium 5.8
In plain English
A medium-severity security flaw in SNAP PAC S1 from OPTO 22. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities).
Severity (CVSS 3.1)5.8Medium
Exploit odds (30 days)0.5%top 58.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The File Transfer Protocol (FTP) port is open by default in the SNAP PAC S1 Firmware version R10.3b. This could allow an adversary to access some device files.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| OPTO 22 | SNAP PAC S1 | R10.3b |
Weakness: CWE-1188 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N