CVE-2023-40707CWE-521

Weak password requirements in OPTO 22 SNAP PAC S1 Built-in Web Server

High · published August 24, 2023

CVSS v3.1
8.6
EPSS
1%
Percentile
47.1
In the wild
Unconfirmed
What it is

There are no requirements for setting a complex password in the built-in web server of the SNAP PAC S1 Firmware version R10.3b, which could allow for a successful brute force attack if users don't set up complex credentials.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00583 · 47.1th percentile
Weakness
CWE-521 · Weak Password Requirements
Published
2023-08-24T16:05Z
EPSS history
Timeline
  • 24 AUG 16:05Z
    Weak password requirements in OPTO 22 SNAP PAC S1 Built-in Web Server
    cvelistv5