CVE-2023-40708 - CVE House

Status published Medium CVE-2023-40708

Improper Access Control in OPTO 22 SNAP PAC S1

5.8 CVSS

Vulnerability Description

The File Transfer Protocol (FTP) port is open by default in the SNAP PAC S1 Firmware version R10.3b. This could allow an adversary to access some device files.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-40708

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Nicolas Cano

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-236-02

More from OPTO 22

View All →

CVE-2023-40710

An adversary could cause a continuous restart loop to the...

Medium 6.8

CVE-2023-40709

Uncontrolled Resource Consumption in OPTO 22 SNAP PAC S1 Built-In Web Server

Medium 6.8

CVE-2023-40707

Weak password requirements in OPTO 22 SNAP PAC S1 Built-in Web Server

High 8.6

CVE-2023-40706

Improper Restriction of Excessive Authentication Attempts in OPTO 22 SNAP PAC S1 Built-in Web Server

High 8.6

Affected Vendor

OPTO 22

View all reports →

Affected Software

SNAP PAC S1

Vulnerable Versions:

R10.3b

Timeline

Official Publish: August 24th, 2023

Last Modified: October 2nd, 2024

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Weaknesses (CWE)

CWE-1188

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.