CVE-2023-40708CWE-1188

Improper Access Control in OPTO 22 SNAP PAC S1

Medium · published August 24, 2023

CVSS v3.1
5.8
EPSS
0%
Percentile
40.2
In the wild
Unconfirmed
What it is

The File Transfer Protocol (FTP) port is open by default in the SNAP PAC S1 Firmware version R10.3b. This could allow an adversary to access some device files.

The record
Technical detail
CVSS v3.1
5.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00477 · 40.2th percentile
Weakness
CWE-1188 · Initialization of a Resource with an Insecure Default
Published
2023-08-24T16:08Z
EPSS history
Timeline
  • 24 AUG 16:08Z
    Improper Access Control in OPTO 22 SNAP PAC S1
    cvelistv5