VULNERABILITY INTELLIGENCE
CVE-2023-40708
CVSS score5.8 MEDIUM
EPSS probability0.48%
CISA KEVNot currently listed
Published2023-08-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
Description
The File Transfer Protocol (FTP) port is open by default in the SNAP PAC S1 Firmware version R10.3b. This could allow an adversary to access some device files.
Weakness classification
- ot-cert@dragos.com: CWE-1188
- nvd@nist.gov: NVD-CWE-Other
Primary references
- ot-cert@dragos.com — Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource