VULNERABILITY INTELLIGENCE

CVE-2023-40707

CVSS score8.6 HIGH
EPSS probability0.58%
CISA KEVNot currently listed
Published2023-08-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Description

There are no requirements for setting a complex password in the built-in web server of the SNAP PAC S1 Firmware version R10.3b, which could allow for a successful brute force attack if users don't set up complex credentials.

Weakness classification

  • ot-cert@dragos.com: CWE-521
  • nvd@nist.gov: CWE-521

Primary references