CVE-2023-40706CWE-307

Improper Restriction of Excessive Authentication Attempts in OPTO 22 SNAP PAC S1 Built-in Web Server

High · published August 24, 2023

CVSS v3.1
8.6
EPSS
1%
Percentile
51.4
In the wild
Unconfirmed
What it is

There is no limit on the number of login attempts in the web server for the SNAP PAC S1 Firmware version R10.3b. This could allow for a brute-force attack on the built-in web server login.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00670 · 51.4th percentile
Weakness
CWE-307 · Improper Restriction of Excessive Authentication Attempts
Published
2023-08-24T16:03Z
EPSS history
Timeline
  • 24 AUG 16:03Z
    Improper Restriction of Excessive Authentication Attempts in OPTO 22 SNAP PAC S1 Built-in Web Server
    cvelistv5